General
- Target 0b1ea9b40885d869b712617548a32f50aa4c9b146bcf3580d1f532e93e0c1e7a
- Size 1.7MB
- Sample260718-zsys2afv61
- SHA256 0b1ea9b40885d869b712617548a32f50aa4c9b146bcf3580d1f532e93e0c1e7a
- MD5 0e45e17b4cea39661f17b7924e25e6d1
- SHA1 74cf3c8b6f8e772f95b058771e89d7bd32eaeb4e
- SHA512 a9ffcb71a64a1b10886a4df97b24c58b83a5354778b9a8feaf5f0941180e4df13e0136db2948b06b8e47c19b26bfb05de9c99c1ad225441486bbe4107bd87b01
- SSDEEP 24576:jvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:jHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T128858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0b1ea9b40885d869b712617548a32f50aa4c9b146bcf3580d1f532e93e0c1e7a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0b1ea9b40885d869b712617548a32f50aa4c9b146bcf3580d1f532e93e0c1e7a
- Size 1.7MB
- SHA256 0b1ea9b40885d869b712617548a32f50aa4c9b146bcf3580d1f532e93e0c1e7a
- MD5 0e45e17b4cea39661f17b7924e25e6d1
- SHA1 74cf3c8b6f8e772f95b058771e89d7bd32eaeb4e
- SHA512 a9ffcb71a64a1b10886a4df97b24c58b83a5354778b9a8feaf5f0941180e4df13e0136db2948b06b8e47c19b26bfb05de9c99c1ad225441486bbe4107bd87b01
- SSDEEP 24576:jvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:jHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T128858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory