General
- Target 0ec51408f0caf82a9246c4f168783ee2cc2036182c8500d03a98e8b22afbc328
- Size 2.5MB
- Sample260718-ydhmtset2x
- SHA256 0ec51408f0caf82a9246c4f168783ee2cc2036182c8500d03a98e8b22afbc328
- MD5 7696cdb691af80c97093937606d3741a
- SHA1 d1874e607358b9b0649b61e63d220cb6455f5b8a
- SHA512 2b6ad9cf1d44a898038d82cea51615b72d83a19fa82fda9db57718a9da9995b8e0c3875de664db39c5e35057474c6cd0cd7af1f437dfcee14e9d6f996fe76f8d
- SSDEEP 49152:FHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:FnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1E3C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0ec51408f0caf82a9246c4f168783ee2cc2036182c8500d03a98e8b22afbc328.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0ec51408f0caf82a9246c4f168783ee2cc2036182c8500d03a98e8b22afbc328
- Size 2.5MB
- SHA256 0ec51408f0caf82a9246c4f168783ee2cc2036182c8500d03a98e8b22afbc328
- MD5 7696cdb691af80c97093937606d3741a
- SHA1 d1874e607358b9b0649b61e63d220cb6455f5b8a
- SHA512 2b6ad9cf1d44a898038d82cea51615b72d83a19fa82fda9db57718a9da9995b8e0c3875de664db39c5e35057474c6cd0cd7af1f437dfcee14e9d6f996fe76f8d
- SSDEEP 49152:FHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:FnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1E3C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory