General
- Target 9713935b3415a5ac30d31668c1c9bd210cc8bb099dc0c23ba819adbbd571c97f
- Size 640KB
- Sample260802-bazeva1dnc
- SHA256 9713935b3415a5ac30d31668c1c9bd210cc8bb099dc0c23ba819adbbd571c97f
- MD5 9941c799ac5594cd10478eaeef9127dd
- SHA1 2e36142d70313eab1d758c3ccfeed57b7e1e1679
- SHA512 355331e94b51eb1b8baef123b68870578f42420f07b64bbc7296ef7a697523e2d422fb09344fd0b1496a8d8bf0e036f3ddfada9e5b85053b76909dd74e9b5e60
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T145D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9713935b3415a5ac30d31668c1c9bd210cc8bb099dc0c23ba819adbbd571c97f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9713935b3415a5ac30d31668c1c9bd210cc8bb099dc0c23ba819adbbd571c97f
- Size 640KB
- SHA256 9713935b3415a5ac30d31668c1c9bd210cc8bb099dc0c23ba819adbbd571c97f
- MD5 9941c799ac5594cd10478eaeef9127dd
- SHA1 2e36142d70313eab1d758c3ccfeed57b7e1e1679
- SHA512 355331e94b51eb1b8baef123b68870578f42420f07b64bbc7296ef7a697523e2d422fb09344fd0b1496a8d8bf0e036f3ddfada9e5b85053b76909dd74e9b5e60
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T145D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory