General
- Target 6d1806a426ea74b1e9f62562856d13dafae4f67f421b8a68302a48e2edb941a0
- Size 374KB
- Sample260908-kapp3swbqb
- SHA256 6d1806a426ea74b1e9f62562856d13dafae4f67f421b8a68302a48e2edb941a0
- MD5 da258f25ae20779d37e6c4ccda302d94
- SHA1 a198e77cddb8ff43ff866488c99e0c21852272e6
- SHA512 2b6332846570ce575b69e5885a3a5dd664a1b97fbfc1410cf2fed47d887a337fac9df001ff495a096cc3f7749534f12a064b58d10c2d44eccc98982265b79c1c
- SSDEEP 6144:QcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:QSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1A0846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6d1806a426ea74b1e9f62562856d13dafae4f67f421b8a68302a48e2edb941a0.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d1806a426ea74b1e9f62562856d13dafae4f67f421b8a68302a48e2edb941a0.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6d1806a426ea74b1e9f62562856d13dafae4f67f421b8a68302a48e2edb941a0
- Size 374KB
- SHA256 6d1806a426ea74b1e9f62562856d13dafae4f67f421b8a68302a48e2edb941a0
- MD5 da258f25ae20779d37e6c4ccda302d94
- SHA1 a198e77cddb8ff43ff866488c99e0c21852272e6
- SHA512 2b6332846570ce575b69e5885a3a5dd664a1b97fbfc1410cf2fed47d887a337fac9df001ff495a096cc3f7749534f12a064b58d10c2d44eccc98982265b79c1c
- SSDEEP 6144:QcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:QSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1A0846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory