General
- Target e044c5ea62d6dde6dc27cc881a66e630d34092de0193a1501f8ec7d3576e76eb
- Size 1.4MB
- Sample260727-mflaysdj4v
- SHA256 e044c5ea62d6dde6dc27cc881a66e630d34092de0193a1501f8ec7d3576e76eb
- MD5 cb8b3d5566a24b29fa924948d3b79d1b
- SHA1 0d67d44387a314eec03626eefa00ebe62c8459f0
- SHA512 69c31bbef2b17544a95c8721f708bf44e45b527e698083cd8b402b1c504b7e12b53c203c5f74bf76a31e54f08ed6d67e881dc7d0463e85f850320ee6413d383b
- SSDEEP 24576:zjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:zTGkQy5QZuTtS0rQMYOQ+q8CE0I
- TLSH T15B65AE21B341C036D59A01758ABE4BAE957CBD314B2551C7B3C87E7E6FB12D2AA3130B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e044c5ea62d6dde6dc27cc881a66e630d34092de0193a1501f8ec7d3576e76eb.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e044c5ea62d6dde6dc27cc881a66e630d34092de0193a1501f8ec7d3576e76eb
- Size 1.4MB
- SHA256 e044c5ea62d6dde6dc27cc881a66e630d34092de0193a1501f8ec7d3576e76eb
- MD5 cb8b3d5566a24b29fa924948d3b79d1b
- SHA1 0d67d44387a314eec03626eefa00ebe62c8459f0
- SHA512 69c31bbef2b17544a95c8721f708bf44e45b527e698083cd8b402b1c504b7e12b53c203c5f74bf76a31e54f08ed6d67e881dc7d0463e85f850320ee6413d383b
- SSDEEP 24576:zjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:zTGkQy5QZuTtS0rQMYOQ+q8CE0I
- TLSH T15B65AE21B341C036D59A01758ABE4BAE957CBD314B2551C7B3C87E7E6FB12D2AA3130B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory