General
- Target 2ecb325f5914aff25729db9d70824212bf891c55f835e98953fc97421b5bd862
- Size 576KB
- Sample260729-kcvdcazara
- SHA256 2ecb325f5914aff25729db9d70824212bf891c55f835e98953fc97421b5bd862
- MD5 e2bc11b06eb47788231296afe9451c12
- SHA1 c650e32980461f7f9adb8673acfbcbba73da1368
- SHA512 93c4232fcac31f136e00ab675774ba58669611ab3c7c948437aede84337c7bb0fd4415abb3b3c3ff696bd8765ac766a64f59324b6b4bb9bf1d1848da82bd8d85
- SSDEEP 6144:hcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:hSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1D3C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2ecb325f5914aff25729db9d70824212bf891c55f835e98953fc97421b5bd862.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2ecb325f5914aff25729db9d70824212bf891c55f835e98953fc97421b5bd862
- Size 576KB
- SHA256 2ecb325f5914aff25729db9d70824212bf891c55f835e98953fc97421b5bd862
- MD5 e2bc11b06eb47788231296afe9451c12
- SHA1 c650e32980461f7f9adb8673acfbcbba73da1368
- SHA512 93c4232fcac31f136e00ab675774ba58669611ab3c7c948437aede84337c7bb0fd4415abb3b3c3ff696bd8765ac766a64f59324b6b4bb9bf1d1848da82bd8d85
- SSDEEP 6144:hcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:hSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1D3C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory