General
- Target ab2e3bc5a69d4d7e12f47014431224f2a17aa50d1ad93fcea49c931b381275b7
- Size 1024KB
- Sample260429-nl2esse16r
- SHA256 ab2e3bc5a69d4d7e12f47014431224f2a17aa50d1ad93fcea49c931b381275b7
- MD5 3b00631b75e3fb193cc6d5d662e10a4b
- SHA1 dcce0c2b3052fb4c5072c9aed2f4ca404cdeb8d7
- SHA512 e331c9017d02399e33513fa85d68a90b71a43c8e4c324f46fe87b05230c0ba6efcaf608e27db92299f689c16bbdacc896baec8e147d4d364f40988368107c032
- SSDEEP 24576:ijHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+y:iTGkQy5QZuTtS0rQi
- TLSH T166259E31E242C03AD5A70172C6BE4BAF95687D25432961C7A3D43D762FB62D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ab2e3bc5a69d4d7e12f47014431224f2a17aa50d1ad93fcea49c931b381275b7.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ab2e3bc5a69d4d7e12f47014431224f2a17aa50d1ad93fcea49c931b381275b7
- Size 1024KB
- SHA256 ab2e3bc5a69d4d7e12f47014431224f2a17aa50d1ad93fcea49c931b381275b7
- MD5 3b00631b75e3fb193cc6d5d662e10a4b
- SHA1 dcce0c2b3052fb4c5072c9aed2f4ca404cdeb8d7
- SHA512 e331c9017d02399e33513fa85d68a90b71a43c8e4c324f46fe87b05230c0ba6efcaf608e27db92299f689c16bbdacc896baec8e147d4d364f40988368107c032
- SSDEEP 24576:ijHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+y:iTGkQy5QZuTtS0rQi
- TLSH T166259E31E242C03AD5A70172C6BE4BAF95687D25432961C7A3D43D762FB62D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory