General
- Target 3214134f33deca3bb28490066ad575c83f0be0b7d5561b7a0cd6a96b8c2e6f06
- Size 1.1MB
- Sample260427-ac8kvsav8x
- SHA256 3214134f33deca3bb28490066ad575c83f0be0b7d5561b7a0cd6a96b8c2e6f06
- MD5 20c91655e4ca760b476cb5df3c21dd79
- SHA1 8cd2abe15eb922f51ecc2db1bcf3920cd05e8c0a
- SHA512 0a2122e8b47ef18ef2c954d80cc102c9db41d0ea6748b0a300f0d362d6ebfd0109907a600ee37e03d12c9f929cb3b311dccd9162786225f676db8a2472658379
- SSDEEP 12288:ZSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:gvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1AB357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3214134f33deca3bb28490066ad575c83f0be0b7d5561b7a0cd6a96b8c2e6f06.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 3214134f33deca3bb28490066ad575c83f0be0b7d5561b7a0cd6a96b8c2e6f06
- Size 1.1MB
- SHA256 3214134f33deca3bb28490066ad575c83f0be0b7d5561b7a0cd6a96b8c2e6f06
- MD5 20c91655e4ca760b476cb5df3c21dd79
- SHA1 8cd2abe15eb922f51ecc2db1bcf3920cd05e8c0a
- SHA512 0a2122e8b47ef18ef2c954d80cc102c9db41d0ea6748b0a300f0d362d6ebfd0109907a600ee37e03d12c9f929cb3b311dccd9162786225f676db8a2472658379
- SSDEEP 12288:ZSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:gvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1AB357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory