General
- Target ff95424ebc7b7381211a825a03d7c3330e68cdc242cc9397d7055462ff1dd10e
- Size 576KB
- Sample260709-28974saw7n
- SHA256 ff95424ebc7b7381211a825a03d7c3330e68cdc242cc9397d7055462ff1dd10e
- MD5 569bc3e9cdc565a7e6cccf8fb3d02313
- SHA1 c8fd799283e93d56d8a1277331666af309f47260
- SHA512 48387a23136c0b38d8ee93b192f03bb960eac46ccfa98571772a6ff21c6bc1dd2936fe61520fbad23c9e4ede7918e5b4c090abab8124b4c6dc74b83f7e69d91a
- SSDEEP 12288:GqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:GjHPOSOkx2LFscUQPK
- TLSH T106C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ff95424ebc7b7381211a825a03d7c3330e68cdc242cc9397d7055462ff1dd10e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ff95424ebc7b7381211a825a03d7c3330e68cdc242cc9397d7055462ff1dd10e
- Size 576KB
- SHA256 ff95424ebc7b7381211a825a03d7c3330e68cdc242cc9397d7055462ff1dd10e
- MD5 569bc3e9cdc565a7e6cccf8fb3d02313
- SHA1 c8fd799283e93d56d8a1277331666af309f47260
- SHA512 48387a23136c0b38d8ee93b192f03bb960eac46ccfa98571772a6ff21c6bc1dd2936fe61520fbad23c9e4ede7918e5b4c090abab8124b4c6dc74b83f7e69d91a
- SSDEEP 12288:GqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:GjHPOSOkx2LFscUQPK
- TLSH T106C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory