General
- Target d99fb8c4bb6d223127402083467b8fca7de2cc252140a7521fc2a74dd87dd3b3
- Size 576KB
- Sample260802-mcwmhsgf33
- SHA256 d99fb8c4bb6d223127402083467b8fca7de2cc252140a7521fc2a74dd87dd3b3
- MD5 c376f3253a9eafaad9ef074301e8c7ab
- SHA1 638d0bc3e78c7b71761f420a767d4d42e967b377
- SHA512 bc10ce967e9c99a03f1d7ab03060af50ed6f97d59de8a602c1f54f4d46ba9c57b83217a3deaab391f1697212da3f090bb14722097bd8a0290ae4253a6e7f7e31
- SSDEEP 6144:+cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:+SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1FDC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d99fb8c4bb6d223127402083467b8fca7de2cc252140a7521fc2a74dd87dd3b3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d99fb8c4bb6d223127402083467b8fca7de2cc252140a7521fc2a74dd87dd3b3
- Size 576KB
- SHA256 d99fb8c4bb6d223127402083467b8fca7de2cc252140a7521fc2a74dd87dd3b3
- MD5 c376f3253a9eafaad9ef074301e8c7ab
- SHA1 638d0bc3e78c7b71761f420a767d4d42e967b377
- SHA512 bc10ce967e9c99a03f1d7ab03060af50ed6f97d59de8a602c1f54f4d46ba9c57b83217a3deaab391f1697212da3f090bb14722097bd8a0290ae4253a6e7f7e31
- SSDEEP 6144:+cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:+SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1FDC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory