General
- Target e635411156df7d6a8132c420d30844f7bfc3ecd04da66f4764da4ac1d1b5cb07
- Size 560KB
- Sample260802-lem8gsxsbx
- SHA256 e635411156df7d6a8132c420d30844f7bfc3ecd04da66f4764da4ac1d1b5cb07
- MD5 65e7004bb6bd66345b8beb09a2972680
- SHA1 afaa0149d68ada512a1ca23a1ce871fd39e921b8
- SHA512 195ae2aa3446c61b9b52d41b8c5a0a8cfe23a2283046d43c4f86e6be4dacc58feace5d9f5148785a32410ba799e0cc992d77489a131e8a918cbfff86917048dd
- SSDEEP 6144:HWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:HkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T16AC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e635411156df7d6a8132c420d30844f7bfc3ecd04da66f4764da4ac1d1b5cb07.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e635411156df7d6a8132c420d30844f7bfc3ecd04da66f4764da4ac1d1b5cb07
- Size 560KB
- SHA256 e635411156df7d6a8132c420d30844f7bfc3ecd04da66f4764da4ac1d1b5cb07
- MD5 65e7004bb6bd66345b8beb09a2972680
- SHA1 afaa0149d68ada512a1ca23a1ce871fd39e921b8
- SHA512 195ae2aa3446c61b9b52d41b8c5a0a8cfe23a2283046d43c4f86e6be4dacc58feace5d9f5148785a32410ba799e0cc992d77489a131e8a918cbfff86917048dd
- SSDEEP 6144:HWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:HkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T16AC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory