General
- Target 21bc851cfe31db1575a083c369c89ccd1c6abb10f006783da80784f26caead64
- Size 271KB
- Sample260428-xd5xpadt7y
- SHA256 21bc851cfe31db1575a083c369c89ccd1c6abb10f006783da80784f26caead64
- MD5 b0ff86db6957c717220bcce4d506d1a7
- SHA1 1a30be8c6e0690db7e64c66ca53d7fe865d163b0
- SHA512 81f1673800fd008b99fc5ba3eb14f5eeca712f6f45439f747babf868509d722aedef38063c0119ae92d5eb9ba83bd5b8d7afd7d7c0ba9484877ffeb22410b52c
- SSDEEP 6144:Sl51orRJXlDixHkUXe35rGcEOkCybEaQRXr9HNdvOa:qqXUHkUXe39sOkx2LIa
- TLSH T1E544CF5BF27440B6C49AD678C9935A5AFBF1B815872143CF1320C25A1F737E2AE3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
21bc851cfe31db1575a083c369c89ccd1c6abb10f006783da80784f26caead64.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 21bc851cfe31db1575a083c369c89ccd1c6abb10f006783da80784f26caead64
- Size 271KB
- SHA256 21bc851cfe31db1575a083c369c89ccd1c6abb10f006783da80784f26caead64
- MD5 b0ff86db6957c717220bcce4d506d1a7
- SHA1 1a30be8c6e0690db7e64c66ca53d7fe865d163b0
- SHA512 81f1673800fd008b99fc5ba3eb14f5eeca712f6f45439f747babf868509d722aedef38063c0119ae92d5eb9ba83bd5b8d7afd7d7c0ba9484877ffeb22410b52c
- SSDEEP 6144:Sl51orRJXlDixHkUXe35rGcEOkCybEaQRXr9HNdvOa:qqXUHkUXe39sOkx2LIa
- TLSH T1E544CF5BF27440B6C49AD678C9935A5AFBF1B815872143CF1320C25A1F737E2AE3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory