General
- Target 1c6dd42b293334abb80c879f10948e02b46fa7e9f3a8138a1da4802e180a3666
- Size 2.9MB
- Sample260417-d2aa5ses7q
- SHA256 1c6dd42b293334abb80c879f10948e02b46fa7e9f3a8138a1da4802e180a3666
- MD5 2f31026b0d475d0cb2f365b235246fe7
- SHA1 9f81b1d266180f412040fbeb46fb5db4baaa7256
- SHA512 b5778b174dabbe6506165df4753efa4a473b938d7fe55b301becd866661422530aeb4d2c7ce5feed0e650e74b3eb861e99d45167fd046ab32202137ad9b7a585
- SSDEEP 49152:IHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:InKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1A8D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1c6dd42b293334abb80c879f10948e02b46fa7e9f3a8138a1da4802e180a3666.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1c6dd42b293334abb80c879f10948e02b46fa7e9f3a8138a1da4802e180a3666
- Size 2.9MB
- SHA256 1c6dd42b293334abb80c879f10948e02b46fa7e9f3a8138a1da4802e180a3666
- MD5 2f31026b0d475d0cb2f365b235246fe7
- SHA1 9f81b1d266180f412040fbeb46fb5db4baaa7256
- SHA512 b5778b174dabbe6506165df4753efa4a473b938d7fe55b301becd866661422530aeb4d2c7ce5feed0e650e74b3eb861e99d45167fd046ab32202137ad9b7a585
- SSDEEP 49152:IHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:InKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1A8D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory