General
- Target a8a7a2b6967048261fd08dafac74849d43e49e806eab1299f27e4fa17da57494
- Size 576KB
- Sample260713-ydbjhsfx2r
- SHA256 a8a7a2b6967048261fd08dafac74849d43e49e806eab1299f27e4fa17da57494
- MD5 9155b6ffc06cbf1416b1ea5e7bbb5a84
- SHA1 66bca6d80cd0ebd731ca124729688e6130931d08
- SHA512 c3a90fb16c3f24681a71c0628995002680e79b793e423558c2c9061b1ed8c65da3023043983412b5dd0a10878ad9da697da61e059db402e55e336877d2a2fff1
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:DSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T172C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a8a7a2b6967048261fd08dafac74849d43e49e806eab1299f27e4fa17da57494.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a8a7a2b6967048261fd08dafac74849d43e49e806eab1299f27e4fa17da57494
- Size 576KB
- SHA256 a8a7a2b6967048261fd08dafac74849d43e49e806eab1299f27e4fa17da57494
- MD5 9155b6ffc06cbf1416b1ea5e7bbb5a84
- SHA1 66bca6d80cd0ebd731ca124729688e6130931d08
- SHA512 c3a90fb16c3f24681a71c0628995002680e79b793e423558c2c9061b1ed8c65da3023043983412b5dd0a10878ad9da697da61e059db402e55e336877d2a2fff1
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:DSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T172C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory