General
- Target 5a7043a01769cde7ffad16341a4a32dbd86a8d7da9c4dd45df45715f7cc4536f
- Size 640KB
- Sample260722-ybczkabe36
- SHA256 5a7043a01769cde7ffad16341a4a32dbd86a8d7da9c4dd45df45715f7cc4536f
- MD5 fd324877b9ed2e2561a899e1d9f66982
- SHA1 21a0f912344ce4f69cf8141e927f5d7c103f3b3e
- SHA512 ea8717c16c73422d30e067b273fadfc2d448c97fe9b5601f0d1485bbb06f558871fed7362ea127cf56a46b809ff5d88a836c99942118fa12d3ebacaf657e1d83
- SSDEEP 6144:1cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:1SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T159D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5a7043a01769cde7ffad16341a4a32dbd86a8d7da9c4dd45df45715f7cc4536f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 5a7043a01769cde7ffad16341a4a32dbd86a8d7da9c4dd45df45715f7cc4536f
- Size 640KB
- SHA256 5a7043a01769cde7ffad16341a4a32dbd86a8d7da9c4dd45df45715f7cc4536f
- MD5 fd324877b9ed2e2561a899e1d9f66982
- SHA1 21a0f912344ce4f69cf8141e927f5d7c103f3b3e
- SHA512 ea8717c16c73422d30e067b273fadfc2d448c97fe9b5601f0d1485bbb06f558871fed7362ea127cf56a46b809ff5d88a836c99942118fa12d3ebacaf657e1d83
- SSDEEP 6144:1cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:1SvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T159D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory