General
- Target 0a4f4a55ac730ea843af347b2784c7a1c2d7ce91159b9c12bb2a9c10ff9670a7
- Size 560KB
- Sample260718-ydhmtset2s
- SHA256 0a4f4a55ac730ea843af347b2784c7a1c2d7ce91159b9c12bb2a9c10ff9670a7
- MD5 a6526b71e5401535b6a51155308d2c91
- SHA1 4af726962f108532cce41a9c3673544c139d70be
- SHA512 7bfde3bc539e90235efc6e85d1490d7bc9b064ea5dcc9edc033149e6bd0d4930cda35837cb0a358997ee784a09cb4f135790e4046341d97e2bfcca3df93923ea
- SSDEEP 6144:5UJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:5YsVOdhElvkCgvDLe4usOkxHy
- TLSH T1D5C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0a4f4a55ac730ea843af347b2784c7a1c2d7ce91159b9c12bb2a9c10ff9670a7.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0a4f4a55ac730ea843af347b2784c7a1c2d7ce91159b9c12bb2a9c10ff9670a7
- Size 560KB
- SHA256 0a4f4a55ac730ea843af347b2784c7a1c2d7ce91159b9c12bb2a9c10ff9670a7
- MD5 a6526b71e5401535b6a51155308d2c91
- SHA1 4af726962f108532cce41a9c3673544c139d70be
- SHA512 7bfde3bc539e90235efc6e85d1490d7bc9b064ea5dcc9edc033149e6bd0d4930cda35837cb0a358997ee784a09cb4f135790e4046341d97e2bfcca3df93923ea
- SSDEEP 6144:5UJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:5YsVOdhElvkCgvDLe4usOkxHy
- TLSH T1D5C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory