General
- Target ffb69adb5ebe5fc29b0234a5c9c7292ee57c19696f6686d0122ff4cfc0f4e741
- Size 873KB
- Sample260727-dvtffavdph
- SHA256 ffb69adb5ebe5fc29b0234a5c9c7292ee57c19696f6686d0122ff4cfc0f4e741
- MD5 56b383e85e9c87c6b3b3d193e6b7b636
- SHA1 db1a1881ed822e71f97ce4476665028a895d92e9
- SHA512 f20c471d399adb1ffd6854b5c32917ac92aada68739f8f30c457c724821ee6fb510accf4da966df23f7ec2a1e05cb56377f01170fe7798b1dde83c54fdba40ca
- SSDEEP 12288:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:FvO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T19B156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ffb69adb5ebe5fc29b0234a5c9c7292ee57c19696f6686d0122ff4cfc0f4e741.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ffb69adb5ebe5fc29b0234a5c9c7292ee57c19696f6686d0122ff4cfc0f4e741
- Size 873KB
- SHA256 ffb69adb5ebe5fc29b0234a5c9c7292ee57c19696f6686d0122ff4cfc0f4e741
- MD5 56b383e85e9c87c6b3b3d193e6b7b636
- SHA1 db1a1881ed822e71f97ce4476665028a895d92e9
- SHA512 f20c471d399adb1ffd6854b5c32917ac92aada68739f8f30c457c724821ee6fb510accf4da966df23f7ec2a1e05cb56377f01170fe7798b1dde83c54fdba40ca
- SSDEEP 12288:mSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:FvO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T19B156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory