General
- Target 064158d9029bdbea23cbd71baa7a8df2d2997617907a80b7fcc05d8bfbbf405b
- Size 560KB
- Sample260730-ycd81swekc
- SHA256 064158d9029bdbea23cbd71baa7a8df2d2997617907a80b7fcc05d8bfbbf405b
- MD5 fc41c604392d7894e176a50d4e01077b
- SHA1 fed8189a3a5ae29c2a126a66a2c9cfc61acea017
- SHA512 c22551ad7e2a911b85eb74ef8778edc80c2b22fd9ec8fbbc6ea36a3019dad3754e075ba7780d032d2cbaf34900487938e61a23e5c9e135035b78ba99f75897c5
- SSDEEP 6144:l6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:lO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T15BC46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
064158d9029bdbea23cbd71baa7a8df2d2997617907a80b7fcc05d8bfbbf405b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 064158d9029bdbea23cbd71baa7a8df2d2997617907a80b7fcc05d8bfbbf405b
- Size 560KB
- SHA256 064158d9029bdbea23cbd71baa7a8df2d2997617907a80b7fcc05d8bfbbf405b
- MD5 fc41c604392d7894e176a50d4e01077b
- SHA1 fed8189a3a5ae29c2a126a66a2c9cfc61acea017
- SHA512 c22551ad7e2a911b85eb74ef8778edc80c2b22fd9ec8fbbc6ea36a3019dad3754e075ba7780d032d2cbaf34900487938e61a23e5c9e135035b78ba99f75897c5
- SSDEEP 6144:l6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:lO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T15BC46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory