General
- Target 89f9f19e8d40b66bab6bf27fa33acbf93d352769446672bcd3dafec41cf38f1b
- Size 640KB
- Sample260722-x5k2layydy
- SHA256 89f9f19e8d40b66bab6bf27fa33acbf93d352769446672bcd3dafec41cf38f1b
- MD5 ab515673a201f09aa1f3fd38a6c81df5
- SHA1 29721175924dac84eea67eb8116cc0738c8c7924
- SHA512 3726f7ded543ee59c0b147a70ce3b29c647a89c4a4841f5c2c2d55987e75e07185ad4eebe2834f85c6cf58263042e6f40664382e3fc42f472be6f819908b4216
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T16FD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
89f9f19e8d40b66bab6bf27fa33acbf93d352769446672bcd3dafec41cf38f1b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 89f9f19e8d40b66bab6bf27fa33acbf93d352769446672bcd3dafec41cf38f1b
- Size 640KB
- SHA256 89f9f19e8d40b66bab6bf27fa33acbf93d352769446672bcd3dafec41cf38f1b
- MD5 ab515673a201f09aa1f3fd38a6c81df5
- SHA1 29721175924dac84eea67eb8116cc0738c8c7924
- SHA512 3726f7ded543ee59c0b147a70ce3b29c647a89c4a4841f5c2c2d55987e75e07185ad4eebe2834f85c6cf58263042e6f40664382e3fc42f472be6f819908b4216
- SSDEEP 6144:AcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:ASvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T16FD45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory