General
- Target 0798b7ea08fb27d0b5b54d04b505fedee22fd508cb13a798445beabfab07668f
- Size 560KB
- Sample260424-1ff8wsds5p
- SHA256 0798b7ea08fb27d0b5b54d04b505fedee22fd508cb13a798445beabfab07668f
- MD5 8350ebb62f7b08b389801ee3ff4c7cdd
- SHA1 eb4b209a495c26aa92d1e908f5ad3b29a7f617e5
- SHA512 dddad548d1e25368523f710fd76fd0202cdb555ed845d925fe5b894db243335e7486f320b186990067c315179115d7caae7681e2e54b7c01c89c89dff0ded646
- SSDEEP 12288:V3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:nVOL4/gPXKCOkx2LFR
- TLSH T17BC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0798b7ea08fb27d0b5b54d04b505fedee22fd508cb13a798445beabfab07668f.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0798b7ea08fb27d0b5b54d04b505fedee22fd508cb13a798445beabfab07668f
- Size 560KB
- SHA256 0798b7ea08fb27d0b5b54d04b505fedee22fd508cb13a798445beabfab07668f
- MD5 8350ebb62f7b08b389801ee3ff4c7cdd
- SHA1 eb4b209a495c26aa92d1e908f5ad3b29a7f617e5
- SHA512 dddad548d1e25368523f710fd76fd0202cdb555ed845d925fe5b894db243335e7486f320b186990067c315179115d7caae7681e2e54b7c01c89c89dff0ded646
- SSDEEP 12288:V3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:nVOL4/gPXKCOkx2LFR
- TLSH T17BC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory