General
- Target cf813d7ff11117e4902f056f7dec69f08f9db55b4f230a37ff0762d5e6de4e7c
- Size 271KB
- Sample260415-jybmpact4y
- SHA256 cf813d7ff11117e4902f056f7dec69f08f9db55b4f230a37ff0762d5e6de4e7c
- MD5 3855b3c47f6a434eeccae94c284d4592
- SHA1 a4e643034813581f4b70e4e14c6d33a3df744418
- SHA512 874422dc71708adb9c5c30f454ffc1ea3c8aa6b0d14026760670a365e280abafa882378acd58ca36c07972e2fd50e02a15439fa4568e40ac1e8b6200ec658680
- SSDEEP 6144:/l51orRJXlDixHkUXe35rGcEOkCybEaQRXr9HNdvOa:xqXUHkUXe39sOkx2LIa
- TLSH T15B44CF5BF27440B6C49AD678C9935A5AFBF1B815872143CF1320C25A1F737E2AE3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cf813d7ff11117e4902f056f7dec69f08f9db55b4f230a37ff0762d5e6de4e7c.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target cf813d7ff11117e4902f056f7dec69f08f9db55b4f230a37ff0762d5e6de4e7c
- Size 271KB
- SHA256 cf813d7ff11117e4902f056f7dec69f08f9db55b4f230a37ff0762d5e6de4e7c
- MD5 3855b3c47f6a434eeccae94c284d4592
- SHA1 a4e643034813581f4b70e4e14c6d33a3df744418
- SHA512 874422dc71708adb9c5c30f454ffc1ea3c8aa6b0d14026760670a365e280abafa882378acd58ca36c07972e2fd50e02a15439fa4568e40ac1e8b6200ec658680
- SSDEEP 6144:/l51orRJXlDixHkUXe35rGcEOkCybEaQRXr9HNdvOa:xqXUHkUXe39sOkx2LIa
- TLSH T15B44CF5BF27440B6C49AD678C9935A5AFBF1B815872143CF1320C25A1F737E2AE3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory