General
- Target b1813836f6bf666264e213444ae85c803e9964b08545d4efa9e3a0abcc446c86
- Size 638KB
- Sample260802-fp1zfadd59
- SHA256 b1813836f6bf666264e213444ae85c803e9964b08545d4efa9e3a0abcc446c86
- MD5 8035f0f6b5b7a21228b053f82dea59c9
- SHA1 6fe3f9936a2fdd5e9c0c4e65fe83bbc791855226
- SHA512 2dc77cbeb1d754a57e3982d97f2c2596888777bddc4f5cd692b43a6d046cfa360e7fc92e78437c60e19fad86b9b265dad1270fe6d5f13fd61c4d912e4262e553
- SSDEEP 6144:gcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:gSvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T118D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b1813836f6bf666264e213444ae85c803e9964b08545d4efa9e3a0abcc446c86.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b1813836f6bf666264e213444ae85c803e9964b08545d4efa9e3a0abcc446c86
- Size 638KB
- SHA256 b1813836f6bf666264e213444ae85c803e9964b08545d4efa9e3a0abcc446c86
- MD5 8035f0f6b5b7a21228b053f82dea59c9
- SHA1 6fe3f9936a2fdd5e9c0c4e65fe83bbc791855226
- SHA512 2dc77cbeb1d754a57e3982d97f2c2596888777bddc4f5cd692b43a6d046cfa360e7fc92e78437c60e19fad86b9b265dad1270fe6d5f13fd61c4d912e4262e553
- SSDEEP 6144:gcTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8KK5R2:gSvO2x9mONvKRhLSFtsOkx2LIaeyk5g
- TLSH T118D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory