General
- Target 23ed6837349382f2f0b58ce0071cddfd6e43ee88ba9e0ccaf48dcca20106289e.exe
- Size 2.5MB
- Sample260708-net25sfy2r
- SHA256 23ed6837349382f2f0b58ce0071cddfd6e43ee88ba9e0ccaf48dcca20106289e
- MD5 bc38e44f8d8174e6977bd1d16d8c02d2
- SHA1 569a7c4b0cc84c30212007b8f197889d758440b9
- SHA512 9fe4c9f5826c48a7320f7c7120bccc9c30ea6d78779230e9990655ad9dcecd008fe16e750a033eb66e0d7f1340df29aa5ca527ea6b71bd9b6adeb221bffca952
- SSDEEP 49152:GHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:GnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T114C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
23ed6837349382f2f0b58ce0071cddfd6e43ee88ba9e0ccaf48dcca20106289e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 23ed6837349382f2f0b58ce0071cddfd6e43ee88ba9e0ccaf48dcca20106289e.exe
- Size 2.5MB
- SHA256 23ed6837349382f2f0b58ce0071cddfd6e43ee88ba9e0ccaf48dcca20106289e
- MD5 bc38e44f8d8174e6977bd1d16d8c02d2
- SHA1 569a7c4b0cc84c30212007b8f197889d758440b9
- SHA512 9fe4c9f5826c48a7320f7c7120bccc9c30ea6d78779230e9990655ad9dcecd008fe16e750a033eb66e0d7f1340df29aa5ca527ea6b71bd9b6adeb221bffca952
- SSDEEP 49152:GHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:GnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T114C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory