General
- Target a09105f46cedf7399126a9836cd1eb02d5eaae5e4f46f3d7d603f2cfed7ee1f9
- Size 638KB
- Sample260424-c8mz5sds91
- SHA256 a09105f46cedf7399126a9836cd1eb02d5eaae5e4f46f3d7d603f2cfed7ee1f9
- MD5 629e11294f28f090ba6452004cb10b50
- SHA1 148649b481d07c31c4f7eac983e53313441b05a0
- SHA512 321099f4adbd03041886bfb157e44e997ce98bc8314f7d6ee54533cb634be30c949de0de7c431ad417a9b902e9d3bbfc5e76826ff66425f4d53f90389d46bfd2
- SSDEEP 6144:XcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:XSvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T145D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a09105f46cedf7399126a9836cd1eb02d5eaae5e4f46f3d7d603f2cfed7ee1f9.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a09105f46cedf7399126a9836cd1eb02d5eaae5e4f46f3d7d603f2cfed7ee1f9
- Size 638KB
- SHA256 a09105f46cedf7399126a9836cd1eb02d5eaae5e4f46f3d7d603f2cfed7ee1f9
- MD5 629e11294f28f090ba6452004cb10b50
- SHA1 148649b481d07c31c4f7eac983e53313441b05a0
- SHA512 321099f4adbd03041886bfb157e44e997ce98bc8314f7d6ee54533cb634be30c949de0de7c431ad417a9b902e9d3bbfc5e76826ff66425f4d53f90389d46bfd2
- SSDEEP 6144:XcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:XSvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T145D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory