General
- Target a5b0cc1fa2e6380e47b18fdc65da9a3f79758f02ff09b9e246401a50233df4a6
- Size 560KB
- Sample260801-xw8rasvalh
- SHA256 a5b0cc1fa2e6380e47b18fdc65da9a3f79758f02ff09b9e246401a50233df4a6
- MD5 db211525383109134a950ff8aa45b0d1
- SHA1 968019651521ffc800e23f0757a5397a13f2ceab
- SHA512 fb94fd01fff42f8d383d105da68e318cb04fed6e37ef70987323432d74f9243a2809fb51625a91400e79d7edc3cde131f784ec017da32f4e01625a05255af767
- SSDEEP 6144:iWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ikCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T17CC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a5b0cc1fa2e6380e47b18fdc65da9a3f79758f02ff09b9e246401a50233df4a6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a5b0cc1fa2e6380e47b18fdc65da9a3f79758f02ff09b9e246401a50233df4a6
- Size 560KB
- SHA256 a5b0cc1fa2e6380e47b18fdc65da9a3f79758f02ff09b9e246401a50233df4a6
- MD5 db211525383109134a950ff8aa45b0d1
- SHA1 968019651521ffc800e23f0757a5397a13f2ceab
- SHA512 fb94fd01fff42f8d383d105da68e318cb04fed6e37ef70987323432d74f9243a2809fb51625a91400e79d7edc3cde131f784ec017da32f4e01625a05255af767
- SSDEEP 6144:iWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ikCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T17CC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory