General
- Target 5cf725278f8cf34e59c45eb8b4f1b34c33d9415bf7f78c34a0a7475ec807b152
- Size 768KB
- Sample260428-nbtxzagy4x
- SHA256 5cf725278f8cf34e59c45eb8b4f1b34c33d9415bf7f78c34a0a7475ec807b152
- MD5 ba24502b737322feeca2d68acbe8645d
- SHA1 ecca09cbfa70b7d4a5be75b36513eea60c617265
- SHA512 0739f801ed20f761f7635505da90b4594793e820278a77a8763285ded4a79cce74d6c4884851ede7de81d1279706c0d4fdeaff4c20eb58cca569ea3b803a60e3
- SSDEEP 12288:UqXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:UjHPOSOkx2LFscU6UQOJdT
- TLSH T1A7F47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5cf725278f8cf34e59c45eb8b4f1b34c33d9415bf7f78c34a0a7475ec807b152.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 5cf725278f8cf34e59c45eb8b4f1b34c33d9415bf7f78c34a0a7475ec807b152
- Size 768KB
- SHA256 5cf725278f8cf34e59c45eb8b4f1b34c33d9415bf7f78c34a0a7475ec807b152
- MD5 ba24502b737322feeca2d68acbe8645d
- SHA1 ecca09cbfa70b7d4a5be75b36513eea60c617265
- SHA512 0739f801ed20f761f7635505da90b4594793e820278a77a8763285ded4a79cce74d6c4884851ede7de81d1279706c0d4fdeaff4c20eb58cca569ea3b803a60e3
- SSDEEP 12288:UqXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:UjHPOSOkx2LFscU6UQOJdT
- TLSH T1A7F47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory