General
- Target 1bd6d1e51bba056e91904d9d730a2afc5e0d411a388bda5738007ea1a36be900
- Size 560KB
- Sample260710-zncd8sht8k
- SHA256 1bd6d1e51bba056e91904d9d730a2afc5e0d411a388bda5738007ea1a36be900
- MD5 c03c0bdbc6bccd247c41abff8210ab0d
- SHA1 10342045c67fd1f719e305af62bf2a9c3a210979
- SHA512 2eac6c2dbe211ebf93f5963dd5a67496b89c5e66313d17e5b519bbb4f831087d9e55a29372c5ed1f86bc899a4ecfac1851e936f552652f331e0ac1b88f7cea26
- SSDEEP 6144:ZWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ZkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1B4C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1bd6d1e51bba056e91904d9d730a2afc5e0d411a388bda5738007ea1a36be900.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1bd6d1e51bba056e91904d9d730a2afc5e0d411a388bda5738007ea1a36be900
- Size 560KB
- SHA256 1bd6d1e51bba056e91904d9d730a2afc5e0d411a388bda5738007ea1a36be900
- MD5 c03c0bdbc6bccd247c41abff8210ab0d
- SHA1 10342045c67fd1f719e305af62bf2a9c3a210979
- SHA512 2eac6c2dbe211ebf93f5963dd5a67496b89c5e66313d17e5b519bbb4f831087d9e55a29372c5ed1f86bc899a4ecfac1851e936f552652f331e0ac1b88f7cea26
- SSDEEP 6144:ZWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ZkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1B4C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory