General
- Target b4956f38e48f4d5ecd1b10853199ab6783b7b92c366b5eebf1965a4f4ac53c45
- Size 560KB
- Sample260802-fla9lsvdrh
- SHA256 b4956f38e48f4d5ecd1b10853199ab6783b7b92c366b5eebf1965a4f4ac53c45
- MD5 b626e2ebe0ea7ad4c49f0c368594eb3a
- SHA1 28191e62034d859d8edcae7809093bf7a2938632
- SHA512 f9f5fdfc167c467b0029513fcc5d67ef39f0b9cade1257aac904a59c509457143db0a2a9b06f2958163f6a370e25dd19da25990ef8359c6c0bf8706d605ecf63
- SSDEEP 6144:KWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:KkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T121C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b4956f38e48f4d5ecd1b10853199ab6783b7b92c366b5eebf1965a4f4ac53c45.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b4956f38e48f4d5ecd1b10853199ab6783b7b92c366b5eebf1965a4f4ac53c45
- Size 560KB
- SHA256 b4956f38e48f4d5ecd1b10853199ab6783b7b92c366b5eebf1965a4f4ac53c45
- MD5 b626e2ebe0ea7ad4c49f0c368594eb3a
- SHA1 28191e62034d859d8edcae7809093bf7a2938632
- SHA512 f9f5fdfc167c467b0029513fcc5d67ef39f0b9cade1257aac904a59c509457143db0a2a9b06f2958163f6a370e25dd19da25990ef8359c6c0bf8706d605ecf63
- SSDEEP 6144:KWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:KkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T121C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory