General
- Target 2f24bc374b17ae35d833ecc8620005f9a63aafa623e85bdba1b34c184b253efd
- Size 640KB
- Sample260714-ynph5acx2j
- SHA256 2f24bc374b17ae35d833ecc8620005f9a63aafa623e85bdba1b34c184b253efd
- MD5 8f9eb9c6c7c371ebf3cdc6a27a90ab0e
- SHA1 a3d657a4dc89ff3de7927a3f05aaa3f998494466
- SHA512 43d1228a327ab4c6556e95d09071b549e4bc319a4914d0c54d6e233b914823355cb4e7c71f268b90007292c9a7feed44c252e135e77564e19be29074c22695da
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:DSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T187D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2f24bc374b17ae35d833ecc8620005f9a63aafa623e85bdba1b34c184b253efd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2f24bc374b17ae35d833ecc8620005f9a63aafa623e85bdba1b34c184b253efd
- Size 640KB
- SHA256 2f24bc374b17ae35d833ecc8620005f9a63aafa623e85bdba1b34c184b253efd
- MD5 8f9eb9c6c7c371ebf3cdc6a27a90ab0e
- SHA1 a3d657a4dc89ff3de7927a3f05aaa3f998494466
- SHA512 43d1228a327ab4c6556e95d09071b549e4bc319a4914d0c54d6e233b914823355cb4e7c71f268b90007292c9a7feed44c252e135e77564e19be29074c22695da
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:DSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T187D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory