General
- Target 80b8a5d244d2cc514ee5e778c4f1d6f12c22cbb6acc9b89e63c75a58ade2a490
- Size 1.1MB
- Sample260709-19c4bsas9m
- SHA256 80b8a5d244d2cc514ee5e778c4f1d6f12c22cbb6acc9b89e63c75a58ade2a490
- MD5 5ac6007d7814b96fc4f5e15e129c173c
- SHA1 04a1e3542b6cc0223eb64295c5be6821a1285627
- SHA512 2438feba2a1197ad18953c05dd3ee1eeadfc90a57895d633b92fbf703a787dcdc2cd8465be57b2579ea789e97e5001ebc8790256021da713d6c8c0e01b7da8e9
- SSDEEP 12288:zSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:GvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T18A357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
80b8a5d244d2cc514ee5e778c4f1d6f12c22cbb6acc9b89e63c75a58ade2a490.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 80b8a5d244d2cc514ee5e778c4f1d6f12c22cbb6acc9b89e63c75a58ade2a490
- Size 1.1MB
- SHA256 80b8a5d244d2cc514ee5e778c4f1d6f12c22cbb6acc9b89e63c75a58ade2a490
- MD5 5ac6007d7814b96fc4f5e15e129c173c
- SHA1 04a1e3542b6cc0223eb64295c5be6821a1285627
- SHA512 2438feba2a1197ad18953c05dd3ee1eeadfc90a57895d633b92fbf703a787dcdc2cd8465be57b2579ea789e97e5001ebc8790256021da713d6c8c0e01b7da8e9
- SSDEEP 12288:zSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:GvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T18A357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory