General
- Target 9becfecd9c47fc97b61dd9fdd989083f051c8ef83812bf46dd4f3914e813ec98
- Size 2.9MB
- Sample260528-th64rset6n
- SHA256 9becfecd9c47fc97b61dd9fdd989083f051c8ef83812bf46dd4f3914e813ec98
- MD5 cc9c0d799eee2d79844ec1eac510cb8c
- SHA1 56be5b07bd8ff9133d1ae76f7a7dc0fc497904c2
- SHA512 d90516a66756e24780e7a2826c8d5b6dbdc4bf90b33d4eeedf4e60d1e96f2a10b30ef5f4b2c984057c30b8f2ce521d91ab6c829aa7bffdb60c81541dde9f6df6
- SSDEEP 49152:OHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:OnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T184D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9becfecd9c47fc97b61dd9fdd989083f051c8ef83812bf46dd4f3914e813ec98.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9becfecd9c47fc97b61dd9fdd989083f051c8ef83812bf46dd4f3914e813ec98
- Size 2.9MB
- SHA256 9becfecd9c47fc97b61dd9fdd989083f051c8ef83812bf46dd4f3914e813ec98
- MD5 cc9c0d799eee2d79844ec1eac510cb8c
- SHA1 56be5b07bd8ff9133d1ae76f7a7dc0fc497904c2
- SHA512 d90516a66756e24780e7a2826c8d5b6dbdc4bf90b33d4eeedf4e60d1e96f2a10b30ef5f4b2c984057c30b8f2ce521d91ab6c829aa7bffdb60c81541dde9f6df6
- SSDEEP 49152:OHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:OnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T184D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory