General
- Target fd9d06b0c2c4e5b3504c4af0da97728cb55f5dd0bc31eb8cbcaa1c0ad7f10bef
- Size 3.0MB
- Sample260717-vs4l3act3y
- SHA256 fd9d06b0c2c4e5b3504c4af0da97728cb55f5dd0bc31eb8cbcaa1c0ad7f10bef
- MD5 610409712b5699cac319b99cde499b9d
- SHA1 16ca792375b60ccb88e0677ea396a167a5dde7b7
- SHA512 5890a2fcbbfd85d0b13a19d9c022bd8f4c8a6d567de98061d507afb447520f20dafa02b50cc08006430aad51b17d2c7356d0dd57f11580fda99966d183699168
- SSDEEP 49152:7A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:8/whnLrHp/qKm2/Sb/
- TLSH T1E7E55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
fd9d06b0c2c4e5b3504c4af0da97728cb55f5dd0bc31eb8cbcaa1c0ad7f10bef.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd9d06b0c2c4e5b3504c4af0da97728cb55f5dd0bc31eb8cbcaa1c0ad7f10bef.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target fd9d06b0c2c4e5b3504c4af0da97728cb55f5dd0bc31eb8cbcaa1c0ad7f10bef
- Size 3.0MB
- SHA256 fd9d06b0c2c4e5b3504c4af0da97728cb55f5dd0bc31eb8cbcaa1c0ad7f10bef
- MD5 610409712b5699cac319b99cde499b9d
- SHA1 16ca792375b60ccb88e0677ea396a167a5dde7b7
- SHA512 5890a2fcbbfd85d0b13a19d9c022bd8f4c8a6d567de98061d507afb447520f20dafa02b50cc08006430aad51b17d2c7356d0dd57f11580fda99966d183699168
- SSDEEP 49152:7A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:8/whnLrHp/qKm2/Sb/
- TLSH T1E7E55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory