General
- Target 40e325ad0c0ba652a0e4fa661d4d1219f1f97d04587da7112ffc2b68129a7d5f
- Size 640KB
- Sample260722-ydrwhabe63
- SHA256 40e325ad0c0ba652a0e4fa661d4d1219f1f97d04587da7112ffc2b68129a7d5f
- MD5 9317cec4f45516dd4998d61227175675
- SHA1 4f81296227474f6cb4a7180034843f2e0027bfc1
- SHA512 404209372cd11a7046c8c6c50ba2fa33d0bc93f7f885812a085d410717a3cd70f4a27d05b6043c77f09c062c6b78392bdd84da547cc1ca24c6050ab9d01862c3
- SSDEEP 6144:NcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:NSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
40e325ad0c0ba652a0e4fa661d4d1219f1f97d04587da7112ffc2b68129a7d5f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 40e325ad0c0ba652a0e4fa661d4d1219f1f97d04587da7112ffc2b68129a7d5f
- Size 640KB
- SHA256 40e325ad0c0ba652a0e4fa661d4d1219f1f97d04587da7112ffc2b68129a7d5f
- MD5 9317cec4f45516dd4998d61227175675
- SHA1 4f81296227474f6cb4a7180034843f2e0027bfc1
- SHA512 404209372cd11a7046c8c6c50ba2fa33d0bc93f7f885812a085d410717a3cd70f4a27d05b6043c77f09c062c6b78392bdd84da547cc1ca24c6050ab9d01862c3
- SSDEEP 6144:NcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:NSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T13DD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory