General
- Target c160004b985250c4930e2bc3a3af41e2dfe20a2b0ebe22d30d4f50a46c2f90c3
- Size 560KB
- Sample260729-y2ek3sec78
- SHA256 c160004b985250c4930e2bc3a3af41e2dfe20a2b0ebe22d30d4f50a46c2f90c3
- MD5 9c6c635a66e4824398f2aa357de5eafa
- SHA1 34f645be37de43540cf96093ab37e3f99a3bdca9
- SHA512 e40c5f36034e1aace32be2161b58c7f81be09e8ed6dea537fbcbda934bb733056a385715ad36b8f05725fc089728c0fb7f4dd1c10a346bf51158028749d6c92a
- SSDEEP 6144:D4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:DrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1F1C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c160004b985250c4930e2bc3a3af41e2dfe20a2b0ebe22d30d4f50a46c2f90c3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target c160004b985250c4930e2bc3a3af41e2dfe20a2b0ebe22d30d4f50a46c2f90c3
- Size 560KB
- SHA256 c160004b985250c4930e2bc3a3af41e2dfe20a2b0ebe22d30d4f50a46c2f90c3
- MD5 9c6c635a66e4824398f2aa357de5eafa
- SHA1 34f645be37de43540cf96093ab37e3f99a3bdca9
- SHA512 e40c5f36034e1aace32be2161b58c7f81be09e8ed6dea537fbcbda934bb733056a385715ad36b8f05725fc089728c0fb7f4dd1c10a346bf51158028749d6c92a
- SSDEEP 6144:D4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:DrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1F1C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory