General
- Target df57b40d6a014d25c0b203829a775b3bad17d11a3a1edc7c4444d1b583686bdd
- Size 576KB
- Sample260718-ynk6psbt7n
- SHA256 df57b40d6a014d25c0b203829a775b3bad17d11a3a1edc7c4444d1b583686bdd
- MD5 2912450e813e20d568e6fb529911e490
- SHA1 ee3343d2c2644d5b956d6a02f7b8035d90d64036
- SHA512 8ef26eeef1761acb2eb4f3e389e7b7a08d339d6d2cfda6928c797e9bd031ce7d8893b0a79632b234c4b8ed67306474d05d92dfb49970670bb332b2a0a8869dbf
- SSDEEP 12288:mqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:mjHPOSOkx2LFscUQPK
- TLSH T1F5C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
df57b40d6a014d25c0b203829a775b3bad17d11a3a1edc7c4444d1b583686bdd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target df57b40d6a014d25c0b203829a775b3bad17d11a3a1edc7c4444d1b583686bdd
- Size 576KB
- SHA256 df57b40d6a014d25c0b203829a775b3bad17d11a3a1edc7c4444d1b583686bdd
- MD5 2912450e813e20d568e6fb529911e490
- SHA1 ee3343d2c2644d5b956d6a02f7b8035d90d64036
- SHA512 8ef26eeef1761acb2eb4f3e389e7b7a08d339d6d2cfda6928c797e9bd031ce7d8893b0a79632b234c4b8ed67306474d05d92dfb49970670bb332b2a0a8869dbf
- SSDEEP 12288:mqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:mjHPOSOkx2LFscUQPK
- TLSH T1F5C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory