General
- Target e109f06395d546823627042252aded37609bbc73a07d6d83ff02409ca1f969b1
- Size 1.7MB
- Sample260722-xtz2dayvfz
- SHA256 e109f06395d546823627042252aded37609bbc73a07d6d83ff02409ca1f969b1
- MD5 38cfc737b7d2d191cc6e821c57eecf9c
- SHA1 c9876a240aee5471a8389774d5f8d82160f40089
- SHA512 c63507610ed16fd9dd1005d573acf7c631eeba4f0fc90c919b158bee4bbac5841c11ec53239f984463c0eeda6602ee988f7ac22b548c8a087e4b1ccc12325412
- SSDEEP 24576:rvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:rHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T10C858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e109f06395d546823627042252aded37609bbc73a07d6d83ff02409ca1f969b1.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e109f06395d546823627042252aded37609bbc73a07d6d83ff02409ca1f969b1
- Size 1.7MB
- SHA256 e109f06395d546823627042252aded37609bbc73a07d6d83ff02409ca1f969b1
- MD5 38cfc737b7d2d191cc6e821c57eecf9c
- SHA1 c9876a240aee5471a8389774d5f8d82160f40089
- SHA512 c63507610ed16fd9dd1005d573acf7c631eeba4f0fc90c919b158bee4bbac5841c11ec53239f984463c0eeda6602ee988f7ac22b548c8a087e4b1ccc12325412
- SSDEEP 24576:rvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:rHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T10C858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory