General
- Target 8b2006dd754ac1fff6baa19385064310fc3e9feed170e10ac204128b056ebe6c
- Size 640KB
- Sample260703-h2wllahz2r
- SHA256 8b2006dd754ac1fff6baa19385064310fc3e9feed170e10ac204128b056ebe6c
- MD5 3c91c5977a9bb766a8e84144f9d2a3d8
- SHA1 78404c9344c53d8d689670325016cb40dd182f96
- SHA512 1e3934d7cd5f0c168cd8fee02c1436f0e434d268dd403b183440ee4709c03a25a27b02e7dadd7e15b60f3ecb02c32b5ac834cb5c98afe528968968b1b24e708a
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:lSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F9D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
8b2006dd754ac1fff6baa19385064310fc3e9feed170e10ac204128b056ebe6c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 8b2006dd754ac1fff6baa19385064310fc3e9feed170e10ac204128b056ebe6c
- Size 640KB
- SHA256 8b2006dd754ac1fff6baa19385064310fc3e9feed170e10ac204128b056ebe6c
- MD5 3c91c5977a9bb766a8e84144f9d2a3d8
- SHA1 78404c9344c53d8d689670325016cb40dd182f96
- SHA512 1e3934d7cd5f0c168cd8fee02c1436f0e434d268dd403b183440ee4709c03a25a27b02e7dadd7e15b60f3ecb02c32b5ac834cb5c98afe528968968b1b24e708a
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:lSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1F9D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory