General
- Target f95a8fa91a4ec50643d89425138feb70e4f5514ff5698e19e4c5a45ec4d298fe
- Size 3.0MB
- Sample260716-znf3esht2y
- SHA256 f95a8fa91a4ec50643d89425138feb70e4f5514ff5698e19e4c5a45ec4d298fe
- MD5 2453a82db280ab11453da3e6433577b8
- SHA1 91bca05fd59e67eecf21bef9d4a979cd7a72ca20
- SHA512 0e8df02ff18c2a96f1e81179e03e631160a98561dfb7e40d5e28e8d7476bafc80d962fe5c13c2f0d5f04ea0e206f24e7da5f41f9a3e1cf069a275801e9ba6343
- SSDEEP 49152:tA/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:a/whnLrHp/qKm2/Sb/
- TLSH T17CE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f95a8fa91a4ec50643d89425138feb70e4f5514ff5698e19e4c5a45ec4d298fe.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f95a8fa91a4ec50643d89425138feb70e4f5514ff5698e19e4c5a45ec4d298fe
- Size 3.0MB
- SHA256 f95a8fa91a4ec50643d89425138feb70e4f5514ff5698e19e4c5a45ec4d298fe
- MD5 2453a82db280ab11453da3e6433577b8
- SHA1 91bca05fd59e67eecf21bef9d4a979cd7a72ca20
- SHA512 0e8df02ff18c2a96f1e81179e03e631160a98561dfb7e40d5e28e8d7476bafc80d962fe5c13c2f0d5f04ea0e206f24e7da5f41f9a3e1cf069a275801e9ba6343
- SSDEEP 49152:tA/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:a/whnLrHp/qKm2/Sb/
- TLSH T17CE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory