General
- Target 2b0641e1801c88f68b24decfadeecdf2980410411f477e38eab01fed632a338f
- Size 271KB
- Sample260507-xtv3esc18k
- SHA256 2b0641e1801c88f68b24decfadeecdf2980410411f477e38eab01fed632a338f
- MD5 ccbd9114c4c665b53dd9c38249f73e38
- SHA1 817b70b1a5ab0b11654f89c346ae76f6a37cbf41
- SHA512 5df3661308b3264749d2e19ec0de5a8cf644bf5123b753f17dc2b6beb961615f38b5abf335a4a952e9ab55154c846becee9a0b326d45d7f64b72794a93593741
- SSDEEP 6144:1l51orRJXlDixHkUXe35rGcEOkCybEaQRXr9HNdvOa:DqXUHkUXe39sOkx2LIa
- TLSH T11644CF5BF27440B6C49AD678C9935A5AFBF1B815872143CF1320C25A1F737E2AE3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2b0641e1801c88f68b24decfadeecdf2980410411f477e38eab01fed632a338f.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2b0641e1801c88f68b24decfadeecdf2980410411f477e38eab01fed632a338f
- Size 271KB
- SHA256 2b0641e1801c88f68b24decfadeecdf2980410411f477e38eab01fed632a338f
- MD5 ccbd9114c4c665b53dd9c38249f73e38
- SHA1 817b70b1a5ab0b11654f89c346ae76f6a37cbf41
- SHA512 5df3661308b3264749d2e19ec0de5a8cf644bf5123b753f17dc2b6beb961615f38b5abf335a4a952e9ab55154c846becee9a0b326d45d7f64b72794a93593741
- SSDEEP 6144:1l51orRJXlDixHkUXe35rGcEOkCybEaQRXr9HNdvOa:DqXUHkUXe39sOkx2LIa
- TLSH T11644CF5BF27440B6C49AD678C9935A5AFBF1B815872143CF1320C25A1F737E2AE3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory