General
- Target 01dd022ab2aa6db8d7a1cc1326e34b3e607871d475fcc628f24659c31ef50d34
- Size 560KB
- Sample260716-yrmtpscx5n
- SHA256 01dd022ab2aa6db8d7a1cc1326e34b3e607871d475fcc628f24659c31ef50d34
- MD5 5fb0c9d4793b40e06f83aee46c663f7b
- SHA1 49b2b2bb86a41c0d4a29dab5afd5c94dad4a27a2
- SHA512 bdf1443ac119afc39e9b5cbfe249e84891d5eb172b8b2550b718ae457a0edddccc9d7ff901addc6b0273be1571dc4dd2d19bda9af17e316efe8a1974615d0f7e
- SSDEEP 6144:q6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:qO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1A1C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
01dd022ab2aa6db8d7a1cc1326e34b3e607871d475fcc628f24659c31ef50d34.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 01dd022ab2aa6db8d7a1cc1326e34b3e607871d475fcc628f24659c31ef50d34
- Size 560KB
- SHA256 01dd022ab2aa6db8d7a1cc1326e34b3e607871d475fcc628f24659c31ef50d34
- MD5 5fb0c9d4793b40e06f83aee46c663f7b
- SHA1 49b2b2bb86a41c0d4a29dab5afd5c94dad4a27a2
- SHA512 bdf1443ac119afc39e9b5cbfe249e84891d5eb172b8b2550b718ae457a0edddccc9d7ff901addc6b0273be1571dc4dd2d19bda9af17e316efe8a1974615d0f7e
- SSDEEP 6144:q6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:qO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1A1C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory