General
- Target 421c8e216b5246dab4538f61bcd0625fb40b9ed50954ca1561a625cb1de363c0
- Size 2.5MB
- Sample260529-efdxwact7q
- SHA256 421c8e216b5246dab4538f61bcd0625fb40b9ed50954ca1561a625cb1de363c0
- MD5 66362a6fd8c14e815bc5b16b1500783a
- SHA1 0c79e39377134f6a57a173e23e3e38f3c5352ad9
- SHA512 2eb4bb2e9e5686672c9bd3978f16f08b6f89542fda9d84a831ac32607936950899b9336e3fcc6c8496e2a46738d37fef484c40bd4605b2f58caf0b01d4ba43b8
- SSDEEP 49152:WHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:WnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1E7C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
421c8e216b5246dab4538f61bcd0625fb40b9ed50954ca1561a625cb1de363c0.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 421c8e216b5246dab4538f61bcd0625fb40b9ed50954ca1561a625cb1de363c0
- Size 2.5MB
- SHA256 421c8e216b5246dab4538f61bcd0625fb40b9ed50954ca1561a625cb1de363c0
- MD5 66362a6fd8c14e815bc5b16b1500783a
- SHA1 0c79e39377134f6a57a173e23e3e38f3c5352ad9
- SHA512 2eb4bb2e9e5686672c9bd3978f16f08b6f89542fda9d84a831ac32607936950899b9336e3fcc6c8496e2a46738d37fef484c40bd4605b2f58caf0b01d4ba43b8
- SSDEEP 49152:WHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:WnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1E7C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory