General
- Target 0bda9c5fd9c7756d091d566d715642a8d7c0658b35b1d8406b52b62416cd6e7c
- Size 560KB
- Sample260718-ydhmtset2v
- SHA256 0bda9c5fd9c7756d091d566d715642a8d7c0658b35b1d8406b52b62416cd6e7c
- MD5 ea72f3bdd84aa203896d3da1411ec8d9
- SHA1 21c22f97cf30975b194c07b591506fbc45bedcd1
- SHA512 f76d907e391b9a718b097119938af34c3b3b77f36d5915fab35dda3e893644e8b44941c2e7c033c65f3dacb9519477eb1da94777a46dd7079090a1ce6d6ad4a6
- SSDEEP 6144:t6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:tO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1C3C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0bda9c5fd9c7756d091d566d715642a8d7c0658b35b1d8406b52b62416cd6e7c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0bda9c5fd9c7756d091d566d715642a8d7c0658b35b1d8406b52b62416cd6e7c
- Size 560KB
- SHA256 0bda9c5fd9c7756d091d566d715642a8d7c0658b35b1d8406b52b62416cd6e7c
- MD5 ea72f3bdd84aa203896d3da1411ec8d9
- SHA1 21c22f97cf30975b194c07b591506fbc45bedcd1
- SHA512 f76d907e391b9a718b097119938af34c3b3b77f36d5915fab35dda3e893644e8b44941c2e7c033c65f3dacb9519477eb1da94777a46dd7079090a1ce6d6ad4a6
- SSDEEP 6144:t6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:tO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T1C3C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory