General
- Target c4b6854e29190b6d0186b1380232e880e7cafab3efa116009f870c3b74451502
- Size 638KB
- Sample260505-xwtx5sd16w
- SHA256 c4b6854e29190b6d0186b1380232e880e7cafab3efa116009f870c3b74451502
- MD5 0a6d3c4627fd7751a508097fe6e51883
- SHA1 3126818f04ce91724943e637e52f1d0a2b209ceb
- SHA512 3e780f37944f8be0d9c79b04c5cf97a4062c5744a455e24f1546add8f24c8a395afd1af82174391b31136ac65b0c80aa751fdd1078030b108c3881cd898c0da8
- SSDEEP 6144:rcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T197D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c4b6854e29190b6d0186b1380232e880e7cafab3efa116009f870c3b74451502.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target c4b6854e29190b6d0186b1380232e880e7cafab3efa116009f870c3b74451502
- Size 638KB
- SHA256 c4b6854e29190b6d0186b1380232e880e7cafab3efa116009f870c3b74451502
- MD5 0a6d3c4627fd7751a508097fe6e51883
- SHA1 3126818f04ce91724943e637e52f1d0a2b209ceb
- SHA512 3e780f37944f8be0d9c79b04c5cf97a4062c5744a455e24f1546add8f24c8a395afd1af82174391b31136ac65b0c80aa751fdd1078030b108c3881cd898c0da8
- SSDEEP 6144:rcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:rSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T197D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory