General
- Target 1a956e730ce9578c8821891b65e3d0563a6ab945a8fbdb51c27a4186801166c9
- Size 560KB
- Sample260528-msbbhsc19k
- SHA256 1a956e730ce9578c8821891b65e3d0563a6ab945a8fbdb51c27a4186801166c9
- MD5 ea82f951b1f084e35cd36d95c4fdf5f5
- SHA1 e185ab8abe94dad53e3c492c17108d45c390d144
- SHA512 a98b5884db275d52fed002590f5b12f2ba6b147f70c83563c3ab7b61cc586e75df4b3a8145e8bb5f0ed3a89de2dfd72a7d41d89e7b1dcf351e8f7b2d07988d0f
- SSDEEP 12288:q3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:KVOL4/gPXKCOkx2LFR
- TLSH T1A4C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1a956e730ce9578c8821891b65e3d0563a6ab945a8fbdb51c27a4186801166c9.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1a956e730ce9578c8821891b65e3d0563a6ab945a8fbdb51c27a4186801166c9
- Size 560KB
- SHA256 1a956e730ce9578c8821891b65e3d0563a6ab945a8fbdb51c27a4186801166c9
- MD5 ea82f951b1f084e35cd36d95c4fdf5f5
- SHA1 e185ab8abe94dad53e3c492c17108d45c390d144
- SHA512 a98b5884db275d52fed002590f5b12f2ba6b147f70c83563c3ab7b61cc586e75df4b3a8145e8bb5f0ed3a89de2dfd72a7d41d89e7b1dcf351e8f7b2d07988d0f
- SSDEEP 12288:q3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:KVOL4/gPXKCOkx2LFR
- TLSH T1A4C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory