General
- Target 2ec321daa67ad1dedf8c1f0ce7a45fc6775b99b06068400ef812bfd36ae168a2
- Size 1.1MB
- Sample260722-yftswatcnc
- SHA256 2ec321daa67ad1dedf8c1f0ce7a45fc6775b99b06068400ef812bfd36ae168a2
- MD5 0ae0d88b5cef1893689fb014215fada5
- SHA1 ade485e2e1185fe22d8d2da52c4dc327ed5eeb93
- SHA512 190db3219ffe27b61acf2d01498866d28414aab04c11007a5f5d290a283b40e834588c5bbd2f95c23dc98e159d629c91a3f9899515c1316b6f5f1be4aa5f4a9c
- SSDEEP 12288:SSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:5vO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T15A357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2ec321daa67ad1dedf8c1f0ce7a45fc6775b99b06068400ef812bfd36ae168a2.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2ec321daa67ad1dedf8c1f0ce7a45fc6775b99b06068400ef812bfd36ae168a2
- Size 1.1MB
- SHA256 2ec321daa67ad1dedf8c1f0ce7a45fc6775b99b06068400ef812bfd36ae168a2
- MD5 0ae0d88b5cef1893689fb014215fada5
- SHA1 ade485e2e1185fe22d8d2da52c4dc327ed5eeb93
- SHA512 190db3219ffe27b61acf2d01498866d28414aab04c11007a5f5d290a283b40e834588c5bbd2f95c23dc98e159d629c91a3f9899515c1316b6f5f1be4aa5f4a9c
- SSDEEP 12288:SSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:5vO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T15A357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory