General
- Target 12b814e37ed7162000c736a4288bc509413ae5ae1163ba050da04d1df6a11132
- Size 638KB
- Sample260802-jd44haep9t
- SHA256 12b814e37ed7162000c736a4288bc509413ae5ae1163ba050da04d1df6a11132
- MD5 24321e9548d855a49e51a382b61f10f6
- SHA1 5bab7f2cfbb8836204219c098064c71e2aca496b
- SHA512 957efca90b2024688ec7de23d6b1d980cecd4d24057e60b37bc688e501aad898d1285a451a3c65ad2459aa2c1b96da1da4eadc7dc9e9ac8993950fa65ca00b7b
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:ySvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T168D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
12b814e37ed7162000c736a4288bc509413ae5ae1163ba050da04d1df6a11132.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 12b814e37ed7162000c736a4288bc509413ae5ae1163ba050da04d1df6a11132
- Size 638KB
- SHA256 12b814e37ed7162000c736a4288bc509413ae5ae1163ba050da04d1df6a11132
- MD5 24321e9548d855a49e51a382b61f10f6
- SHA1 5bab7f2cfbb8836204219c098064c71e2aca496b
- SHA512 957efca90b2024688ec7de23d6b1d980cecd4d24057e60b37bc688e501aad898d1285a451a3c65ad2459aa2c1b96da1da4eadc7dc9e9ac8993950fa65ca00b7b
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:ySvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T168D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory