General
- Target 5af6b70044cb2e272367d7d9746c65bd8242b1272f222b4e65a8ef1547a8b9be
- Size 1.4MB
- Sample260718-yssrcaew7z
- SHA256 5af6b70044cb2e272367d7d9746c65bd8242b1272f222b4e65a8ef1547a8b9be
- MD5 b7d3eabd957639f0f4d7ae69b3958fa4
- SHA1 35759e28935ccd8ca2ad273ed5581f2a27ea1108
- SHA512 fcbeb3006de151b764f5da44333b66b0331c8060fce54fada4e0186aa32543f496d0454ef21658894210f3d595216a6facee6fa692e8be42c06ff9ea00be6b9a
- SSDEEP 24576:IjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:ITGkQy5QZuTtS0rQMYOQ+q8CE0I
- TLSH T12D65AE21B341C036D59A01758ABE4BAE957CBD314B2551C7B3C87E7E6FB12D2AA3130B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5af6b70044cb2e272367d7d9746c65bd8242b1272f222b4e65a8ef1547a8b9be.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 5af6b70044cb2e272367d7d9746c65bd8242b1272f222b4e65a8ef1547a8b9be
- Size 1.4MB
- SHA256 5af6b70044cb2e272367d7d9746c65bd8242b1272f222b4e65a8ef1547a8b9be
- MD5 b7d3eabd957639f0f4d7ae69b3958fa4
- SHA1 35759e28935ccd8ca2ad273ed5581f2a27ea1108
- SHA512 fcbeb3006de151b764f5da44333b66b0331c8060fce54fada4e0186aa32543f496d0454ef21658894210f3d595216a6facee6fa692e8be42c06ff9ea00be6b9a
- SSDEEP 24576:IjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:ITGkQy5QZuTtS0rQMYOQ+q8CE0I
- TLSH T12D65AE21B341C036D59A01758ABE4BAE957CBD314B2551C7B3C87E7E6FB12D2AA3130B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory