General
- Target 6d148aebc8cfb32616394c6aa361b1f45ae1a58857c99c832a448baae81b1c1c
- Size 1024KB
- Sample260511-merrcaav2n
- SHA256 6d148aebc8cfb32616394c6aa361b1f45ae1a58857c99c832a448baae81b1c1c
- MD5 d9053df93f5455ede6b44c3fb96e4f89
- SHA1 a87429f7d9c3e6fe63bd65c6ee5df8cd2c88a84c
- SHA512 13b5a50224785334e76f5a2350b801e126629e155396926bc2800d4f3df8a5f30ce1416c4c3a8062470aa766ae7a16bf28c62fa1484e39ba6b12e70a946f2f15
- SSDEEP 24576:YjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+y:YTGkQy5QZuTtS0rQi
- TLSH T154259E31E242C03AD5A70172C6BE4BAF95687D25432961C7A3D43D762FB62D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6d148aebc8cfb32616394c6aa361b1f45ae1a58857c99c832a448baae81b1c1c.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 6d148aebc8cfb32616394c6aa361b1f45ae1a58857c99c832a448baae81b1c1c
- Size 1024KB
- SHA256 6d148aebc8cfb32616394c6aa361b1f45ae1a58857c99c832a448baae81b1c1c
- MD5 d9053df93f5455ede6b44c3fb96e4f89
- SHA1 a87429f7d9c3e6fe63bd65c6ee5df8cd2c88a84c
- SHA512 13b5a50224785334e76f5a2350b801e126629e155396926bc2800d4f3df8a5f30ce1416c4c3a8062470aa766ae7a16bf28c62fa1484e39ba6b12e70a946f2f15
- SSDEEP 24576:YjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+y:YTGkQy5QZuTtS0rQi
- TLSH T154259E31E242C03AD5A70172C6BE4BAF95687D25432961C7A3D43D762FB62D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory