General
- Target db88a845a91badabc442455f1a646f97c1d0c3ad9c878c6be9bec3897e24610b
- Size 1.4MB
- Sample260424-1pcxtsdv7n
- SHA256 db88a845a91badabc442455f1a646f97c1d0c3ad9c878c6be9bec3897e24610b
- MD5 bff059c96cdd82df6768b6526d4b8772
- SHA1 ad6640e11adacfca29c49d2742cc97e9110ce7f1
- SHA512 ce74c91aac5678f9bf7751255d6e314a7509c301d43be45d3f77ecaad4e3f8857d02ce855927e3a0035a4e72b4724d47ed8dd30476d679c44d4192a3f47c2a56
- SSDEEP 24576:zjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:zTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T152658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
db88a845a91badabc442455f1a646f97c1d0c3ad9c878c6be9bec3897e24610b.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target db88a845a91badabc442455f1a646f97c1d0c3ad9c878c6be9bec3897e24610b
- Size 1.4MB
- SHA256 db88a845a91badabc442455f1a646f97c1d0c3ad9c878c6be9bec3897e24610b
- MD5 bff059c96cdd82df6768b6526d4b8772
- SHA1 ad6640e11adacfca29c49d2742cc97e9110ce7f1
- SHA512 ce74c91aac5678f9bf7751255d6e314a7509c301d43be45d3f77ecaad4e3f8857d02ce855927e3a0035a4e72b4724d47ed8dd30476d679c44d4192a3f47c2a56
- SSDEEP 24576:zjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:zTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T152658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory