General
- Target f1652b366e2729367b4abdcdbd8820705a88564345d7fc141067bf7303899f2c
- Size 576KB
- Sample260711-xavybabs2y
- SHA256 f1652b366e2729367b4abdcdbd8820705a88564345d7fc141067bf7303899f2c
- MD5 5ae1b98edff6f8b20c46c32663e5bdf5
- SHA1 6b132a032ce15a48e1efb1eb3b7a48bbd3282653
- SHA512 4c59c78d92a680a031a0081c5bc2c69a2e2a36e0c7cf34aa167028611c5d2f4103ffcaae76eda8b8e0cc10fbe45d4b74b4bc6979bebe809eb6f23e9b5bf9dd29
- SSDEEP 12288:hqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:hjHPOSOkx2LFscUQPK
- TLSH T19BC47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f1652b366e2729367b4abdcdbd8820705a88564345d7fc141067bf7303899f2c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f1652b366e2729367b4abdcdbd8820705a88564345d7fc141067bf7303899f2c
- Size 576KB
- SHA256 f1652b366e2729367b4abdcdbd8820705a88564345d7fc141067bf7303899f2c
- MD5 5ae1b98edff6f8b20c46c32663e5bdf5
- SHA1 6b132a032ce15a48e1efb1eb3b7a48bbd3282653
- SHA512 4c59c78d92a680a031a0081c5bc2c69a2e2a36e0c7cf34aa167028611c5d2f4103ffcaae76eda8b8e0cc10fbe45d4b74b4bc6979bebe809eb6f23e9b5bf9dd29
- SSDEEP 12288:hqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:hjHPOSOkx2LFscUQPK
- TLSH T19BC47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory