General
- Target ed6aec9ecbf8448bf9073d2ed1d63d8c38c00c60a9fcb739a0e35088aabcc8d6
- Size 640KB
- Sample260710-lv7xtsg13n
- SHA256 ed6aec9ecbf8448bf9073d2ed1d63d8c38c00c60a9fcb739a0e35088aabcc8d6
- MD5 a436565f18cdc54e807ea35ae743aec5
- SHA1 a76da63a417e6f9882f4e7f2ff93c9878618697f
- SHA512 4497a8c3252b3859b5723e72f6b13e3d04097a7396e1c400af7ff6da9ea63a0033423ff584b75ee778283a576f141c8b0b7b2e61ffcf6d352332c4748413b1da
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T136D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ed6aec9ecbf8448bf9073d2ed1d63d8c38c00c60a9fcb739a0e35088aabcc8d6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ed6aec9ecbf8448bf9073d2ed1d63d8c38c00c60a9fcb739a0e35088aabcc8d6
- Size 640KB
- SHA256 ed6aec9ecbf8448bf9073d2ed1d63d8c38c00c60a9fcb739a0e35088aabcc8d6
- MD5 a436565f18cdc54e807ea35ae743aec5
- SHA1 a76da63a417e6f9882f4e7f2ff93c9878618697f
- SHA512 4497a8c3252b3859b5723e72f6b13e3d04097a7396e1c400af7ff6da9ea63a0033423ff584b75ee778283a576f141c8b0b7b2e61ffcf6d352332c4748413b1da
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T136D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory