General
- Target 661ccbe4a0a640ac3bf37d814a080a956cb7aa8e4f674c72faeadbf6f92c8115
- Size 640KB
- Sample260511-kh9efsdv8t
- SHA256 661ccbe4a0a640ac3bf37d814a080a956cb7aa8e4f674c72faeadbf6f92c8115
- MD5 3f6984536230f382eab58ecd0195a72c
- SHA1 a288ce3da2684297fcebc31ce44565bd7939b2b8
- SHA512 6f8c8b2135a9be7232366fff95bcb2d65dcf3aa7561875f4867f73bda15134915b7f39f5f58b6f61baf7034046471c26d84f5fbec2c57cfe56ab13b04be02664
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:3SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
661ccbe4a0a640ac3bf37d814a080a956cb7aa8e4f674c72faeadbf6f92c8115.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 661ccbe4a0a640ac3bf37d814a080a956cb7aa8e4f674c72faeadbf6f92c8115
- Size 640KB
- SHA256 661ccbe4a0a640ac3bf37d814a080a956cb7aa8e4f674c72faeadbf6f92c8115
- MD5 3f6984536230f382eab58ecd0195a72c
- SHA1 a288ce3da2684297fcebc31ce44565bd7939b2b8
- SHA512 6f8c8b2135a9be7232366fff95bcb2d65dcf3aa7561875f4867f73bda15134915b7f39f5f58b6f61baf7034046471c26d84f5fbec2c57cfe56ab13b04be02664
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:3SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1A1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory