General
- Target e27ec1d42fd7cb2e2e36c28fea078a615b37eef68733c73e57bc0435c7e9b4a7
- Size 2.6MB
- Sample260529-e97r2scy5n
- SHA256 e27ec1d42fd7cb2e2e36c28fea078a615b37eef68733c73e57bc0435c7e9b4a7
- MD5 38dec74f20380c8dd71873089b1088c3
- SHA1 9d681d443b1e0f08fe645d7146e243a498010029
- SHA512 5111a22798b374e531ad5bdc754008fbe5866c28d90f5dd27c615e3cee3149a273937aeba209d397383e1c429a2705ac620b292089afd7a188457520ce5fe270
- SSDEEP 49152:STGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:SKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T16BC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e27ec1d42fd7cb2e2e36c28fea078a615b37eef68733c73e57bc0435c7e9b4a7.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e27ec1d42fd7cb2e2e36c28fea078a615b37eef68733c73e57bc0435c7e9b4a7
- Size 2.6MB
- SHA256 e27ec1d42fd7cb2e2e36c28fea078a615b37eef68733c73e57bc0435c7e9b4a7
- MD5 38dec74f20380c8dd71873089b1088c3
- SHA1 9d681d443b1e0f08fe645d7146e243a498010029
- SHA512 5111a22798b374e531ad5bdc754008fbe5866c28d90f5dd27c615e3cee3149a273937aeba209d397383e1c429a2705ac620b292089afd7a188457520ce5fe270
- SSDEEP 49152:STGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:SKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T16BC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory