General
- Target 18263c30754b3ae4302455c21bc654cd4485436c2cd9ad0b6850190f6e44016e
- Size 2.6MB
- Sample260702-ypvrjadx9v
- SHA256 18263c30754b3ae4302455c21bc654cd4485436c2cd9ad0b6850190f6e44016e
- MD5 e6e09bdd5aed23d174c0e5f072a855f1
- SHA1 a0fa232a7c357127da16fb900bd1e4978a798423
- SHA512 4861734fa02848404338d7d8d82cf9a2430e62336334a6b08100ed38dbdc97bbe8d8c90a41fa69adf544b8e39bf14a940eeb742b59fec5d4c2faa446201ed69b
- SSDEEP 49152:qTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:qKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1F7C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
18263c30754b3ae4302455c21bc654cd4485436c2cd9ad0b6850190f6e44016e.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 18263c30754b3ae4302455c21bc654cd4485436c2cd9ad0b6850190f6e44016e
- Size 2.6MB
- SHA256 18263c30754b3ae4302455c21bc654cd4485436c2cd9ad0b6850190f6e44016e
- MD5 e6e09bdd5aed23d174c0e5f072a855f1
- SHA1 a0fa232a7c357127da16fb900bd1e4978a798423
- SHA512 4861734fa02848404338d7d8d82cf9a2430e62336334a6b08100ed38dbdc97bbe8d8c90a41fa69adf544b8e39bf14a940eeb742b59fec5d4c2faa446201ed69b
- SSDEEP 49152:qTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:qKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1F7C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory