General
- Target fa0c6c4da47a1c6839c27962af7efd368160f2bc0bb715fff16e959d6d3472ac
- Size 560KB
- Sample260417-22b2qsds2y
- SHA256 fa0c6c4da47a1c6839c27962af7efd368160f2bc0bb715fff16e959d6d3472ac
- MD5 c724c3082bb910ddf4ba9cb4da247a27
- SHA1 d22896c3d04debc29f12d88ee0ce42f6f6fd2cdf
- SHA512 58589a2601629b6f29d62c81bdad116a62830e1aef4a5472c0bcc9ac5dffb9160d8390acf0eeacd00f6f1de11d86514cc71cd8b36fb74008339c93a4a0d16f19
- SSDEEP 6144:aUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:aYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1D6C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
fa0c6c4da47a1c6839c27962af7efd368160f2bc0bb715fff16e959d6d3472ac.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target fa0c6c4da47a1c6839c27962af7efd368160f2bc0bb715fff16e959d6d3472ac
- Size 560KB
- SHA256 fa0c6c4da47a1c6839c27962af7efd368160f2bc0bb715fff16e959d6d3472ac
- MD5 c724c3082bb910ddf4ba9cb4da247a27
- SHA1 d22896c3d04debc29f12d88ee0ce42f6f6fd2cdf
- SHA512 58589a2601629b6f29d62c81bdad116a62830e1aef4a5472c0bcc9ac5dffb9160d8390acf0eeacd00f6f1de11d86514cc71cd8b36fb74008339c93a4a0d16f19
- SSDEEP 6144:aUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:aYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1D6C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory