General
- Target 2fb6399e92ae6450cfcce967568f842458889fbb93ef7e0aaab4769b0296d5d2
- Size 640KB
- Sample260709-2c2k4abv7z
- SHA256 2fb6399e92ae6450cfcce967568f842458889fbb93ef7e0aaab4769b0296d5d2
- MD5 45c99f96c72dac215c40cc75677e6aaa
- SHA1 a9713b1ceabad940557a8ff9bbe8a1cf2d3244f9
- SHA512 58aad85be965a7ba5ba3825ee00a53bebff946f9b7fbe9dc0d0f0b33e8366baf56da84c91d1a8a94c3c4e4528bdb59b9f99dc575ec82023b2060195527455015
- SSDEEP 6144:0cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:0SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C5D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2fb6399e92ae6450cfcce967568f842458889fbb93ef7e0aaab4769b0296d5d2.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2fb6399e92ae6450cfcce967568f842458889fbb93ef7e0aaab4769b0296d5d2
- Size 640KB
- SHA256 2fb6399e92ae6450cfcce967568f842458889fbb93ef7e0aaab4769b0296d5d2
- MD5 45c99f96c72dac215c40cc75677e6aaa
- SHA1 a9713b1ceabad940557a8ff9bbe8a1cf2d3244f9
- SHA512 58aad85be965a7ba5ba3825ee00a53bebff946f9b7fbe9dc0d0f0b33e8366baf56da84c91d1a8a94c3c4e4528bdb59b9f99dc575ec82023b2060195527455015
- SSDEEP 6144:0cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:0SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C5D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory