General
- Target 94002fedd06ee59295ed627ea9ca6190b48ecdd8d294cad617683478651ed374
- Size 618KB
- Sample260507-pgewnsdv7w
- SHA256 94002fedd06ee59295ed627ea9ca6190b48ecdd8d294cad617683478651ed374
- MD5 f8121bc1523bd932e33f983f27106269
- SHA1 ed8d3d10b4d2520125b1bf999668dcee6be3f199
- SHA512 0a751ffdc69a5dbeaa2a21925e983ae577b7cb0631fefefb566699f46ca002cdeb38694987837101c993590dabdbbea48455273b3c3f818586962cc65fc38f82
- SSDEEP 12288:bqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:bjHPOSOkx2LFscUQPxW
- TLSH T12BD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
94002fedd06ee59295ed627ea9ca6190b48ecdd8d294cad617683478651ed374.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 94002fedd06ee59295ed627ea9ca6190b48ecdd8d294cad617683478651ed374
- Size 618KB
- SHA256 94002fedd06ee59295ed627ea9ca6190b48ecdd8d294cad617683478651ed374
- MD5 f8121bc1523bd932e33f983f27106269
- SHA1 ed8d3d10b4d2520125b1bf999668dcee6be3f199
- SHA512 0a751ffdc69a5dbeaa2a21925e983ae577b7cb0631fefefb566699f46ca002cdeb38694987837101c993590dabdbbea48455273b3c3f818586962cc65fc38f82
- SSDEEP 12288:bqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:bjHPOSOkx2LFscUQPxW
- TLSH T12BD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory