General
- Target ef81940cf2ed3568c73d6f35951e0b6904bd16b815be2464fefddedecd7ddd2d
- Size 1.4MB
- Sample260718-ylldpabt2q
- SHA256 ef81940cf2ed3568c73d6f35951e0b6904bd16b815be2464fefddedecd7ddd2d
- MD5 03353d23f30fc12284b6a2e2d631690c
- SHA1 ff47d57d44615fa7e2b45c8160e63e5d97db97a2
- SHA512 083bb7aa7924e4107c15fca97866a84d6e2cb92a39c0580960180e6f88142ca8e4716f6110da0627be8d7b4abde1857ff61122ae574ffa30314ad8f5eeba8fc4
- SSDEEP 24576:MjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:MTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1A6658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ef81940cf2ed3568c73d6f35951e0b6904bd16b815be2464fefddedecd7ddd2d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ef81940cf2ed3568c73d6f35951e0b6904bd16b815be2464fefddedecd7ddd2d
- Size 1.4MB
- SHA256 ef81940cf2ed3568c73d6f35951e0b6904bd16b815be2464fefddedecd7ddd2d
- MD5 03353d23f30fc12284b6a2e2d631690c
- SHA1 ff47d57d44615fa7e2b45c8160e63e5d97db97a2
- SHA512 083bb7aa7924e4107c15fca97866a84d6e2cb92a39c0580960180e6f88142ca8e4716f6110da0627be8d7b4abde1857ff61122ae574ffa30314ad8f5eeba8fc4
- SSDEEP 24576:MjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:MTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1A6658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory