General
- Target 1e311631da0b1dd85e0bb7129fe8c6be94b474fa3ba17a39fd241d5757d7cb7b
- Size 640KB
- Sample260429-ylek5sfx71
- SHA256 1e311631da0b1dd85e0bb7129fe8c6be94b474fa3ba17a39fd241d5757d7cb7b
- MD5 8beb44a7ea08ffb6aea4282167adef06
- SHA1 cb6b47cd1f4e4fb9b0c9e3be06412508ebcd6335
- SHA512 3bad784be49e76acfde8dd4e80b53b0596f13c3dab9731571498ac96435f3a7adf46b8e5f26d4d089984b60cc43d2c12e8427021c3ac7c06b95347c07afdf02f
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:tSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E4D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1e311631da0b1dd85e0bb7129fe8c6be94b474fa3ba17a39fd241d5757d7cb7b.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1e311631da0b1dd85e0bb7129fe8c6be94b474fa3ba17a39fd241d5757d7cb7b
- Size 640KB
- SHA256 1e311631da0b1dd85e0bb7129fe8c6be94b474fa3ba17a39fd241d5757d7cb7b
- MD5 8beb44a7ea08ffb6aea4282167adef06
- SHA1 cb6b47cd1f4e4fb9b0c9e3be06412508ebcd6335
- SHA512 3bad784be49e76acfde8dd4e80b53b0596f13c3dab9731571498ac96435f3a7adf46b8e5f26d4d089984b60cc43d2c12e8427021c3ac7c06b95347c07afdf02f
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:tSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E4D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory