General
- Target 2ea6ee93ca1c3bf58d124956366ea226dc9de342b346589a72c4867b71a016de
- Size 1022KB
- Sample260802-ckph3abg37
- SHA256 2ea6ee93ca1c3bf58d124956366ea226dc9de342b346589a72c4867b71a016de
- MD5 76c8a08c80c9a86ff4aec39ed919e9a7
- SHA1 87fcfef614edcddac037c888765b44e870e2541b
- SHA512 923ba2b79f3824d213ec78608a420f010b7912912a6c8dfd5dae1b5b4e42cc3f2dcc285e4d873c334063bb83a412f07834abafc8d4d50a142fdd82e141e13a54
- SSDEEP 12288:cSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/LikGU5rCOTeidT:vvO2xJKRh2kOkx2LFxNcU6UQOJdT
- TLSH T1C6256B31A681C036D5B34571C6FA4BBBA9747D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2ea6ee93ca1c3bf58d124956366ea226dc9de342b346589a72c4867b71a016de.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2ea6ee93ca1c3bf58d124956366ea226dc9de342b346589a72c4867b71a016de
- Size 1022KB
- SHA256 2ea6ee93ca1c3bf58d124956366ea226dc9de342b346589a72c4867b71a016de
- MD5 76c8a08c80c9a86ff4aec39ed919e9a7
- SHA1 87fcfef614edcddac037c888765b44e870e2541b
- SHA512 923ba2b79f3824d213ec78608a420f010b7912912a6c8dfd5dae1b5b4e42cc3f2dcc285e4d873c334063bb83a412f07834abafc8d4d50a142fdd82e141e13a54
- SSDEEP 12288:cSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/LikGU5rCOTeidT:vvO2xJKRh2kOkx2LFxNcU6UQOJdT
- TLSH T1C6256B31A681C036D5B34571C6FA4BBBA9747D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory