General
- Target c4bfe1f03d53e818ac4239883e46d323c6d4d2a2d037c8cc2844e7668dd226f5
- Size 640KB
- Sample260508-1pg7jsav2k
- SHA256 c4bfe1f03d53e818ac4239883e46d323c6d4d2a2d037c8cc2844e7668dd226f5
- MD5 035f9865550b6ab9b8385fa478b7fb47
- SHA1 f79e1a65af011b4c060b36467881c8072f407013
- SHA512 352a51687e0d7135f932e29de0531c2494141eda348ce01bc1a10ff1e1c768eb86cae81d146d5b37b0b5ea61f6f43bf1a0ab59ad760b306e7ad3e7b78a383561
- SSDEEP 6144:5cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:5SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T19CD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c4bfe1f03d53e818ac4239883e46d323c6d4d2a2d037c8cc2844e7668dd226f5.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target c4bfe1f03d53e818ac4239883e46d323c6d4d2a2d037c8cc2844e7668dd226f5
- Size 640KB
- SHA256 c4bfe1f03d53e818ac4239883e46d323c6d4d2a2d037c8cc2844e7668dd226f5
- MD5 035f9865550b6ab9b8385fa478b7fb47
- SHA1 f79e1a65af011b4c060b36467881c8072f407013
- SHA512 352a51687e0d7135f932e29de0531c2494141eda348ce01bc1a10ff1e1c768eb86cae81d146d5b37b0b5ea61f6f43bf1a0ab59ad760b306e7ad3e7b78a383561
- SSDEEP 6144:5cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:5SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T19CD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory