General
- Target a25034301229e1fb58236829dd8162e37ba9b498a0a92010177ce00f9306c921
- Size 2.9MB
- Sample260731-fbxpvswtaz
- SHA256 a25034301229e1fb58236829dd8162e37ba9b498a0a92010177ce00f9306c921
- MD5 d352f4bd3c2c85306861e4d87b368f7b
- SHA1 7e97c2a142c07692ef98d86aeec0ce26acd29015
- SHA512 0872781865689a9648ca623084d85f81f385eeb1359dee353e093b7929624d5210d843fac5fe0d19b832f81f8340d1808ec3e12338ac6cb5aba1321271fa2c02
- SSDEEP 49152:WHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:WnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T163D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a25034301229e1fb58236829dd8162e37ba9b498a0a92010177ce00f9306c921.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a25034301229e1fb58236829dd8162e37ba9b498a0a92010177ce00f9306c921
- Size 2.9MB
- SHA256 a25034301229e1fb58236829dd8162e37ba9b498a0a92010177ce00f9306c921
- MD5 d352f4bd3c2c85306861e4d87b368f7b
- SHA1 7e97c2a142c07692ef98d86aeec0ce26acd29015
- SHA512 0872781865689a9648ca623084d85f81f385eeb1359dee353e093b7929624d5210d843fac5fe0d19b832f81f8340d1808ec3e12338ac6cb5aba1321271fa2c02
- SSDEEP 49152:WHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:WnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T163D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory