General
- Target 05d8cffd4285682e03c919dac17db35be26e6baf5352f651f07c7315e88581d2
- Size 640KB
- Sample260720-x5mkescz8n
- SHA256 05d8cffd4285682e03c919dac17db35be26e6baf5352f651f07c7315e88581d2
- MD5 00018ec5e032f31a4434e214a48dd6cf
- SHA1 a3b7e3ea6be924bafbe9c42d8c8d6b9997b13d7b
- SHA512 1752eb50add4740f3d7d45acf12dbd75e655d90acb83f03496f1ee672ca2bf93928e91471193eb1b634364f0825741f6e2f75d7a7cfc0c9fea5e686771ccf6cb
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1FFD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
05d8cffd4285682e03c919dac17db35be26e6baf5352f651f07c7315e88581d2.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 05d8cffd4285682e03c919dac17db35be26e6baf5352f651f07c7315e88581d2
- Size 640KB
- SHA256 05d8cffd4285682e03c919dac17db35be26e6baf5352f651f07c7315e88581d2
- MD5 00018ec5e032f31a4434e214a48dd6cf
- SHA1 a3b7e3ea6be924bafbe9c42d8c8d6b9997b13d7b
- SHA512 1752eb50add4740f3d7d45acf12dbd75e655d90acb83f03496f1ee672ca2bf93928e91471193eb1b634364f0825741f6e2f75d7a7cfc0c9fea5e686771ccf6cb
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1FFD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory