General
- Target 0ef6b550180bf8905bd22559a37546b99b1f5a53f52b76f320f375d0a0842a86
- Size 640KB
- Sample260712-yplhvsas5s
- SHA256 0ef6b550180bf8905bd22559a37546b99b1f5a53f52b76f320f375d0a0842a86
- MD5 47edb2b722672957522c787e0532953f
- SHA1 6cdc8c7802a2b7eb00864c97239a4e50ece161fd
- SHA512 3d2c031a58efe0aa8007cd07ca2fccca87bcbac8797689c1abd0d2ebd28fb1cd1056a3bc56dc631538a0644163cf24175cc44ee5f3910563b96da66e8a12d78d
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T19AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0ef6b550180bf8905bd22559a37546b99b1f5a53f52b76f320f375d0a0842a86.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0ef6b550180bf8905bd22559a37546b99b1f5a53f52b76f320f375d0a0842a86
- Size 640KB
- SHA256 0ef6b550180bf8905bd22559a37546b99b1f5a53f52b76f320f375d0a0842a86
- MD5 47edb2b722672957522c787e0532953f
- SHA1 6cdc8c7802a2b7eb00864c97239a4e50ece161fd
- SHA512 3d2c031a58efe0aa8007cd07ca2fccca87bcbac8797689c1abd0d2ebd28fb1cd1056a3bc56dc631538a0644163cf24175cc44ee5f3910563b96da66e8a12d78d
- SSDEEP 6144:9cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:9SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T19AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory