General
- Target 88eed44c6f157a6fe2573c238696e615bb5d29a171544c1cdbc75db70abf1a33
- Size 2.6MB
- Sample260801-xgy9batfkh
- SHA256 88eed44c6f157a6fe2573c238696e615bb5d29a171544c1cdbc75db70abf1a33
- MD5 575cc5b226d02d0b6c4d5c5f3ae6a0c1
- SHA1 6e88aeb499e111e5cbf10526129b3233103d4d2e
- SHA512 1cb806dfd9ad85361fd4a6fd82e7f98686a88be72017995179a2f1ce73299cf3b5356fbf52703f5b5f7d5fcfaf864c5a7f7f380e1e6ca8a790c69d380dc3e096
- SSDEEP 49152:FTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:FKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1B0C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
88eed44c6f157a6fe2573c238696e615bb5d29a171544c1cdbc75db70abf1a33.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 88eed44c6f157a6fe2573c238696e615bb5d29a171544c1cdbc75db70abf1a33
- Size 2.6MB
- SHA256 88eed44c6f157a6fe2573c238696e615bb5d29a171544c1cdbc75db70abf1a33
- MD5 575cc5b226d02d0b6c4d5c5f3ae6a0c1
- SHA1 6e88aeb499e111e5cbf10526129b3233103d4d2e
- SHA512 1cb806dfd9ad85361fd4a6fd82e7f98686a88be72017995179a2f1ce73299cf3b5356fbf52703f5b5f7d5fcfaf864c5a7f7f380e1e6ca8a790c69d380dc3e096
- SSDEEP 49152:FTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:FKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1B0C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory