General
- Target 4d6d6b20a7c4c106c3afc1e93fb6df3be391f06701aa8f13b0142b020527c98b
- Size 560KB
- Sample260528-cs8a5sdx2r
- SHA256 4d6d6b20a7c4c106c3afc1e93fb6df3be391f06701aa8f13b0142b020527c98b
- MD5 6c9e7900f78a318fa2c5cd53bfeb6742
- SHA1 e74cee7c1576ca856772ecce4c7b55a404720f92
- SHA512 38326c46559ef2b1df809654c20a96c559816e76bb54a5974ce8f554d2e438c0afd2aad192748ed8ad80ddff4a07a900903d554380c209893c514ec4f6189251
- SSDEEP 6144:WWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:WkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T14EC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4d6d6b20a7c4c106c3afc1e93fb6df3be391f06701aa8f13b0142b020527c98b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4d6d6b20a7c4c106c3afc1e93fb6df3be391f06701aa8f13b0142b020527c98b
- Size 560KB
- SHA256 4d6d6b20a7c4c106c3afc1e93fb6df3be391f06701aa8f13b0142b020527c98b
- MD5 6c9e7900f78a318fa2c5cd53bfeb6742
- SHA1 e74cee7c1576ca856772ecce4c7b55a404720f92
- SHA512 38326c46559ef2b1df809654c20a96c559816e76bb54a5974ce8f554d2e438c0afd2aad192748ed8ad80ddff4a07a900903d554380c209893c514ec4f6189251
- SSDEEP 6144:WWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:WkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T14EC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory