General
- Target moshou-xinshouhezi.zip
- Size 19.7MB
- Sample260723-ajfhnaeb42
- SHA256 af9a6dacb2a9618866cf398d615b2fe1c1c98ec7254d38a01c7c2d6869821bbe
- MD5 76ddd649d116b9b9df218d063580024c
- SHA1 eb2c53d339d0c893383ed9ac3a33462c6995def5
- SHA512 17a2ce777cedd20cf2a87b63211b5e1dd1643f4749083036491c2fb3bc694dbbadd896fee0735dc910b389a643cd2e37ff1d84657e4d0769d640c2002fd22d65
- SSDEEP 393216:F5leE1/UVJ1iIx9Vh6WTON7qFO+X7rVLjmOfKdW/6NBo6aYyC/osW:zl/UJ19mN7PS3m2KNOZ5Cg9
- TLSH T15A27336CF4C998F3F816800CBE0899D763C43C2797B952C2A78BD9D9DF9EB259200395
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1k8CtV.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 1k8CtV.exe
- Size 20.2MB
- SHA256 3e1a33683e59ff25fa992373da74fd8df0c82f403ce4144566e1bff5d6635339
- MD5 9ad218a61a086a5b465822890971034d
- SHA1 8e9a5e8e525e3dfed4ddf16e2fd1eff0fe59bdd1
- SHA512 e250c1edda1ba5a3fffe743bf2233818e417ec8c724598ab50aa928a5e2670898f49d3d03b7c3da84ca23a6eee822b99646d71e1519c8c4dae096e522e141630
- SSDEEP 393216:bXpoaLzIfhfaKPFXhuopMlnAHmQh/Vp1Jg6jKhuTE1p2YQ0qOHUut:r1zWhXFolnRODgkE1Q3lO0s
- TLSH T18B273327B2CB613FF07A85394A36D253567B7A2166224C9397E4489CCF2A1E01E3F747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.