General
- Target ff07d9b9efcd47a7cd4ffa9242c2e55c623e3e8b293d60da38c82b3cc7cb334a
- Size 560KB
- Sample260716-n1b4fsf12v
- SHA256 ff07d9b9efcd47a7cd4ffa9242c2e55c623e3e8b293d60da38c82b3cc7cb334a
- MD5 7f16d90f0726d5a26cb141b943ed53b6
- SHA1 9084a03c2fc7f73246ebda3f0c4014e61852518a
- SHA512 3b6a84fbb21b20bc841c55fa93ea58277e5f6f3c458ee5e40baef6a56ca2b0ee68f329c4c01883e015114d9c23611c68ca7b39b51b7d3d82cc8782b630a51c17
- SSDEEP 6144:l6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:lO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T102C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ff07d9b9efcd47a7cd4ffa9242c2e55c623e3e8b293d60da38c82b3cc7cb334a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ff07d9b9efcd47a7cd4ffa9242c2e55c623e3e8b293d60da38c82b3cc7cb334a
- Size 560KB
- SHA256 ff07d9b9efcd47a7cd4ffa9242c2e55c623e3e8b293d60da38c82b3cc7cb334a
- MD5 7f16d90f0726d5a26cb141b943ed53b6
- SHA1 9084a03c2fc7f73246ebda3f0c4014e61852518a
- SHA512 3b6a84fbb21b20bc841c55fa93ea58277e5f6f3c458ee5e40baef6a56ca2b0ee68f329c4c01883e015114d9c23611c68ca7b39b51b7d3d82cc8782b630a51c17
- SSDEEP 6144:l6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:lO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T102C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory