General
- Target dfb094244049b79deb4b52e003f65a9d931915bed9c356c3ebe1305637df82ae
- Size 560KB
- Sample260720-ea8kases5m
- SHA256 dfb094244049b79deb4b52e003f65a9d931915bed9c356c3ebe1305637df82ae
- MD5 be92f4cc648e370cf7059119177531c8
- SHA1 dc83972b2685a5c5dfc5591476c8ef68b44e0f34
- SHA512 b253e73075c98d5ef944cd0fb54428f58a6a812a960df781c5956ded482f2d62e03b47ace80beb88deb6a8ad9fa67206b43eb2f2128546e396b6209460290a81
- SSDEEP 6144:nUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:nYsVOdhElvkCgvDLe4usOkxHy
- TLSH T134C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dfb094244049b79deb4b52e003f65a9d931915bed9c356c3ebe1305637df82ae.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target dfb094244049b79deb4b52e003f65a9d931915bed9c356c3ebe1305637df82ae
- Size 560KB
- SHA256 dfb094244049b79deb4b52e003f65a9d931915bed9c356c3ebe1305637df82ae
- MD5 be92f4cc648e370cf7059119177531c8
- SHA1 dc83972b2685a5c5dfc5591476c8ef68b44e0f34
- SHA512 b253e73075c98d5ef944cd0fb54428f58a6a812a960df781c5956ded482f2d62e03b47ace80beb88deb6a8ad9fa67206b43eb2f2128546e396b6209460290a81
- SSDEEP 6144:nUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:nYsVOdhElvkCgvDLe4usOkxHy
- TLSH T134C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory