General
- Target 2bdcae25dc1e7da6fa9aedac019fd91bb5d1ae7a7f74a83cb12b2e392b73a394
- Size 576KB
- Sample260730-ycd81sweka
- SHA256 2bdcae25dc1e7da6fa9aedac019fd91bb5d1ae7a7f74a83cb12b2e392b73a394
- MD5 a7f63d34ecc65cdeadc0e6aac2bbfef2
- SHA1 e0b24c742f294f56a0ff4032237cc0e08ce116bb
- SHA512 046602a84807881d43949bbe52137fe742819fff64cffe49fc987fe6c400bd260dcf53f168b9b9a17d2c5de4c678440e072311c953269da48cf1fa2477561c56
- SSDEEP 6144:ocTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:oSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T141C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2bdcae25dc1e7da6fa9aedac019fd91bb5d1ae7a7f74a83cb12b2e392b73a394.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2bdcae25dc1e7da6fa9aedac019fd91bb5d1ae7a7f74a83cb12b2e392b73a394
- Size 576KB
- SHA256 2bdcae25dc1e7da6fa9aedac019fd91bb5d1ae7a7f74a83cb12b2e392b73a394
- MD5 a7f63d34ecc65cdeadc0e6aac2bbfef2
- SHA1 e0b24c742f294f56a0ff4032237cc0e08ce116bb
- SHA512 046602a84807881d43949bbe52137fe742819fff64cffe49fc987fe6c400bd260dcf53f168b9b9a17d2c5de4c678440e072311c953269da48cf1fa2477561c56
- SSDEEP 6144:ocTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:oSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T141C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory