General
- Target 56c167bc110b0fbfe1f4ee759bea9f1c9a558b10d46db6bb9a3d50105801763b
- Size 560KB
- Sample260718-fsntaahs5k
- SHA256 56c167bc110b0fbfe1f4ee759bea9f1c9a558b10d46db6bb9a3d50105801763b
- MD5 18c794ce1a94ed190fb93b53cc819ebc
- SHA1 d4bdcdb9586ed318d9c5789321ad70a7eb1c41b2
- SHA512 1539d97942aea0cb0765e5b6ce6f6b63b08bc550f5497ec76caca4a5daebd0d7c9ba3594ba3170cd2339257a0dbbc5a978a960539df42ba5af2974c4d85468a0
- SSDEEP 6144:1WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:1kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T180C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
56c167bc110b0fbfe1f4ee759bea9f1c9a558b10d46db6bb9a3d50105801763b.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 56c167bc110b0fbfe1f4ee759bea9f1c9a558b10d46db6bb9a3d50105801763b
- Size 560KB
- SHA256 56c167bc110b0fbfe1f4ee759bea9f1c9a558b10d46db6bb9a3d50105801763b
- MD5 18c794ce1a94ed190fb93b53cc819ebc
- SHA1 d4bdcdb9586ed318d9c5789321ad70a7eb1c41b2
- SHA512 1539d97942aea0cb0765e5b6ce6f6b63b08bc550f5497ec76caca4a5daebd0d7c9ba3594ba3170cd2339257a0dbbc5a978a960539df42ba5af2974c4d85468a0
- SSDEEP 6144:1WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:1kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T180C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory