General
- Target d91c789d7dd6017ec4f08ab51ff848a135e35fa7f00a38d1cdc558cd6761b7d1
- Size 1024KB
- Sample260718-ynna3abt8j
- SHA256 d91c789d7dd6017ec4f08ab51ff848a135e35fa7f00a38d1cdc558cd6761b7d1
- MD5 b9ae7725457d2a8ae54879f42b3f9fd1
- SHA1 9bbc14473a11f82f0e60293e0aa9bb83d45c695e
- SHA512 76610c248d9225f132b5571f1a2be72f88685a18787194428d272f50e0765c08b0287fd624dbcf7ae877251247003a6204dafe3e8d1d3f8370a5683eba85331a
- SSDEEP 24576:QjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:QTGkQyhuTtS0rQi
- TLSH T19125AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d91c789d7dd6017ec4f08ab51ff848a135e35fa7f00a38d1cdc558cd6761b7d1.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d91c789d7dd6017ec4f08ab51ff848a135e35fa7f00a38d1cdc558cd6761b7d1
- Size 1024KB
- SHA256 d91c789d7dd6017ec4f08ab51ff848a135e35fa7f00a38d1cdc558cd6761b7d1
- MD5 b9ae7725457d2a8ae54879f42b3f9fd1
- SHA1 9bbc14473a11f82f0e60293e0aa9bb83d45c695e
- SHA512 76610c248d9225f132b5571f1a2be72f88685a18787194428d272f50e0765c08b0287fd624dbcf7ae877251247003a6204dafe3e8d1d3f8370a5683eba85331a
- SSDEEP 24576:QjHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:QTGkQyhuTtS0rQi
- TLSH T19125AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory