General
- Target cef1680a2d30bc2458f4ac8c21b6d8d8773d06a17bb91ce8d6ba2fb735b97f9f
- Size 1.4MB
- Sample260720-ybbfqsez2s
- SHA256 cef1680a2d30bc2458f4ac8c21b6d8d8773d06a17bb91ce8d6ba2fb735b97f9f
- MD5 62ea9d5e7b2085985f24391bd401c13c
- SHA1 17f364b77150b978ecc9789c90788856cefa61b9
- SHA512 89175255863b1609d402571c10000fdc74e3ec2bce2b463e387430500e734bb9fd6ed41417cb51cbfc2594a50c86d7848fe6a9bd7bce482ac9a5cce3ad64c8d5
- SSDEEP 24576:djHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:dTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1B7658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cef1680a2d30bc2458f4ac8c21b6d8d8773d06a17bb91ce8d6ba2fb735b97f9f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target cef1680a2d30bc2458f4ac8c21b6d8d8773d06a17bb91ce8d6ba2fb735b97f9f
- Size 1.4MB
- SHA256 cef1680a2d30bc2458f4ac8c21b6d8d8773d06a17bb91ce8d6ba2fb735b97f9f
- MD5 62ea9d5e7b2085985f24391bd401c13c
- SHA1 17f364b77150b978ecc9789c90788856cefa61b9
- SHA512 89175255863b1609d402571c10000fdc74e3ec2bce2b463e387430500e734bb9fd6ed41417cb51cbfc2594a50c86d7848fe6a9bd7bce482ac9a5cce3ad64c8d5
- SSDEEP 24576:djHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:dTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1B7658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory