General
- Target 63e8bf37e391e1564e27f9506c3783835c5d29e90a5dc0f6313a725abfbf6c60
- Size 873KB
- Sample260730-j4ftlaxwfw
- SHA256 63e8bf37e391e1564e27f9506c3783835c5d29e90a5dc0f6313a725abfbf6c60
- MD5 311bc2d7cf477e6f7fb15d11c2be6573
- SHA1 5b8159d5d31b5e13ed442fe2346cf2b75dcda9ca
- SHA512 31f979db55ecffe909bc2b3aef4746087c573b544d1f19ff9c15625bbd0125c1dfefd3951b510aa9ae47cc9aee13958f6efdf9572e13114f8781500977024dd7
- SSDEEP 12288:BSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:IvO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T185156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
63e8bf37e391e1564e27f9506c3783835c5d29e90a5dc0f6313a725abfbf6c60.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 63e8bf37e391e1564e27f9506c3783835c5d29e90a5dc0f6313a725abfbf6c60
- Size 873KB
- SHA256 63e8bf37e391e1564e27f9506c3783835c5d29e90a5dc0f6313a725abfbf6c60
- MD5 311bc2d7cf477e6f7fb15d11c2be6573
- SHA1 5b8159d5d31b5e13ed442fe2346cf2b75dcda9ca
- SHA512 31f979db55ecffe909bc2b3aef4746087c573b544d1f19ff9c15625bbd0125c1dfefd3951b510aa9ae47cc9aee13958f6efdf9572e13114f8781500977024dd7
- SSDEEP 12288:BSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:IvO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T185156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory