General
- Target 296a9bac9d7f5a4be6b261396a805544e81e948133abe96d2981c4d4768ff10e
- Size 2.6MB
- Sample260802-bcwrqsbb99
- SHA256 296a9bac9d7f5a4be6b261396a805544e81e948133abe96d2981c4d4768ff10e
- MD5 c21d746a3984b640f8f39feecbd8f911
- SHA1 cd302e5c15a7a6e086826b1c44b83d69c04b5f3c
- SHA512 1d5df777116a8955f9af2ef783165e93613f1d50b5c6121a55f2090481d783b34d8bf2acd1b3a094cc153f3941b72890ea648e028b1b65f2690d5e20b537c102
- SSDEEP 49152:ZTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:ZKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T18BC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
296a9bac9d7f5a4be6b261396a805544e81e948133abe96d2981c4d4768ff10e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 296a9bac9d7f5a4be6b261396a805544e81e948133abe96d2981c4d4768ff10e
- Size 2.6MB
- SHA256 296a9bac9d7f5a4be6b261396a805544e81e948133abe96d2981c4d4768ff10e
- MD5 c21d746a3984b640f8f39feecbd8f911
- SHA1 cd302e5c15a7a6e086826b1c44b83d69c04b5f3c
- SHA512 1d5df777116a8955f9af2ef783165e93613f1d50b5c6121a55f2090481d783b34d8bf2acd1b3a094cc153f3941b72890ea648e028b1b65f2690d5e20b537c102
- SSDEEP 49152:ZTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:ZKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T18BC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory