General
- Target b564b29f0b77603aae7bec5c9cd27b439975c85f5bfc3e9c8b066fced25eda9e
- Size 560KB
- Sample260716-ctfbraex2x
- SHA256 b564b29f0b77603aae7bec5c9cd27b439975c85f5bfc3e9c8b066fced25eda9e
- MD5 17a380b3de5cb7f4b69a5af03dbde86b
- SHA1 c0d7c67660b05e5a2d34ad884a7494e81cc862f6
- SHA512 6590c4976f4d76ab9d31e38dd500c32957ae0806ae9e8a7979f2f92be591d46f4f6e52d31fa4c7564c21e63da20908cfaa7c68ae144a7f65bd3fb5c901fe930b
- SSDEEP 6144:/4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:/rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1B0C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b564b29f0b77603aae7bec5c9cd27b439975c85f5bfc3e9c8b066fced25eda9e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b564b29f0b77603aae7bec5c9cd27b439975c85f5bfc3e9c8b066fced25eda9e
- Size 560KB
- SHA256 b564b29f0b77603aae7bec5c9cd27b439975c85f5bfc3e9c8b066fced25eda9e
- MD5 17a380b3de5cb7f4b69a5af03dbde86b
- SHA1 c0d7c67660b05e5a2d34ad884a7494e81cc862f6
- SHA512 6590c4976f4d76ab9d31e38dd500c32957ae0806ae9e8a7979f2f92be591d46f4f6e52d31fa4c7564c21e63da20908cfaa7c68ae144a7f65bd3fb5c901fe930b
- SSDEEP 6144:/4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:/rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1B0C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory