General
- Target 214e042e0a675b783b8e12813da2fdf6430a3aec8c480a1731d5d70b3a47e8c4
- Size 1022KB
- Sample260430-mbl2padt9v
- SHA256 214e042e0a675b783b8e12813da2fdf6430a3aec8c480a1731d5d70b3a47e8c4
- MD5 436cced077682b1ee02b6419cd413c21
- SHA1 56fed226fc8b9e70e2b5554bdc2f01e6b7b71e68
- SHA512 46fdad9040fd17ae8f02b47951593c839ebc0c9446112f8d621aac4a6d188980c4a1d9a061508babcf8f404f16dda9979f97b176e663725fe45388b527f45b5e
- SSDEEP 12288:jSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/LikGU5rCOTeidT:WvO2xJKRh2kOkx2LFxNcU6UQOJdT
- TLSH T13E256B31A681C036D5B34571C6FA4BBBA9747D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
214e042e0a675b783b8e12813da2fdf6430a3aec8c480a1731d5d70b3a47e8c4.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 214e042e0a675b783b8e12813da2fdf6430a3aec8c480a1731d5d70b3a47e8c4
- Size 1022KB
- SHA256 214e042e0a675b783b8e12813da2fdf6430a3aec8c480a1731d5d70b3a47e8c4
- MD5 436cced077682b1ee02b6419cd413c21
- SHA1 56fed226fc8b9e70e2b5554bdc2f01e6b7b71e68
- SHA512 46fdad9040fd17ae8f02b47951593c839ebc0c9446112f8d621aac4a6d188980c4a1d9a061508babcf8f404f16dda9979f97b176e663725fe45388b527f45b5e
- SSDEEP 12288:jSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/LikGU5rCOTeidT:WvO2xJKRh2kOkx2LFxNcU6UQOJdT
- TLSH T13E256B31A681C036D5B34571C6FA4BBBA9747D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory