General
- Target 85d6c941154eea093a668cf3cba6fee99976436127e4da1a206a22106cc6a52c
- Size 525KB
- Sample260712-yes5ysh16w
- SHA256 85d6c941154eea093a668cf3cba6fee99976436127e4da1a206a22106cc6a52c
- MD5 15d49d07dfe235a3687eee1c66406822
- SHA1 74f373799b7809fddded3fa896e00673778d05b9
- SHA512 8ffcd9d66f90667ad3936fa5bd3e9ea9eb757782bd073f8153bb9d696b0c1f65d97ee14b6653c16fec47196312470289a60eddadd21b877f9826471f528401d5
- SSDEEP 6144:KcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:KSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T14EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
85d6c941154eea093a668cf3cba6fee99976436127e4da1a206a22106cc6a52c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 85d6c941154eea093a668cf3cba6fee99976436127e4da1a206a22106cc6a52c
- Size 525KB
- SHA256 85d6c941154eea093a668cf3cba6fee99976436127e4da1a206a22106cc6a52c
- MD5 15d49d07dfe235a3687eee1c66406822
- SHA1 74f373799b7809fddded3fa896e00673778d05b9
- SHA512 8ffcd9d66f90667ad3936fa5bd3e9ea9eb757782bd073f8153bb9d696b0c1f65d97ee14b6653c16fec47196312470289a60eddadd21b877f9826471f528401d5
- SSDEEP 6144:KcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:KSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T14EB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory