General
- Target 11ecacd8580d0cc4a68ef688f69dfef9dc3e8e68c4e7536a399ee329805b2623
- Size 1.6MB
- Sample261001-ykdbpaxfpc
- SHA256 11ecacd8580d0cc4a68ef688f69dfef9dc3e8e68c4e7536a399ee329805b2623
- MD5 a83b1728553be13a2cd1a26c6ba65d2c
- SHA1 281331dd4ca38c6519e6c484102ceac95d15eda3
- SHA512 1d7a4ed1cb26dff530391271fb0ba458e04ce911b38d4212b3271e4fe41f261792ad7d5ee551b04b10a3829252b544bc10ea1299e7b0fe31d68bfe0552076f98
- SSDEEP 24576:vvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:vHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T146759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11ecacd8580d0cc4a68ef688f69dfef9dc3e8e68c4e7536a399ee329805b2623.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
11ecacd8580d0cc4a68ef688f69dfef9dc3e8e68c4e7536a399ee329805b2623.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 11ecacd8580d0cc4a68ef688f69dfef9dc3e8e68c4e7536a399ee329805b2623
- Size 1.6MB
- SHA256 11ecacd8580d0cc4a68ef688f69dfef9dc3e8e68c4e7536a399ee329805b2623
- MD5 a83b1728553be13a2cd1a26c6ba65d2c
- SHA1 281331dd4ca38c6519e6c484102ceac95d15eda3
- SHA512 1d7a4ed1cb26dff530391271fb0ba458e04ce911b38d4212b3271e4fe41f261792ad7d5ee551b04b10a3829252b544bc10ea1299e7b0fe31d68bfe0552076f98
- SSDEEP 24576:vvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:vHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T146759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory