General
- Target 6c9def6164c9b757f34071529d9e4c481fc1b74c19e8a0e460cf3d8b9a2cf742
- Size 511KB
- Sample261002-e65hhsvy7l
- SHA256 6c9def6164c9b757f34071529d9e4c481fc1b74c19e8a0e460cf3d8b9a2cf742
- MD5 b3c34f9c241eb21380a70e2ea68af740
- SHA1 ea869ee82ca3e064dbdaf95175ac70ae4430be0c
- SHA512 61737a065995609b5a9e11b5300552798531f333fe56fbd79b904adce64a701d4c0e6a03c6b75757235b610ea9cbb7db613edf353dab03f937b5796763717091
- SSDEEP 6144:VcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:VSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T17EB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6c9def6164c9b757f34071529d9e4c481fc1b74c19e8a0e460cf3d8b9a2cf742.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
6c9def6164c9b757f34071529d9e4c481fc1b74c19e8a0e460cf3d8b9a2cf742.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 6c9def6164c9b757f34071529d9e4c481fc1b74c19e8a0e460cf3d8b9a2cf742
- Size 511KB
- SHA256 6c9def6164c9b757f34071529d9e4c481fc1b74c19e8a0e460cf3d8b9a2cf742
- MD5 b3c34f9c241eb21380a70e2ea68af740
- SHA1 ea869ee82ca3e064dbdaf95175ac70ae4430be0c
- SHA512 61737a065995609b5a9e11b5300552798531f333fe56fbd79b904adce64a701d4c0e6a03c6b75757235b610ea9cbb7db613edf353dab03f937b5796763717091
- SSDEEP 6144:VcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:VSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T17EB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory