General
- Target 79519c03ad163c485340d8693fca3df47c018972ba1eccf786b5660e9ad92a3b
- Size 576KB
- Sample260802-xtbc1see79
- SHA256 79519c03ad163c485340d8693fca3df47c018972ba1eccf786b5660e9ad92a3b
- MD5 d925af68f54a0fafe88ebd49fd54005b
- SHA1 3973db0650729f1c41d2d0ab7e8d4fe2058fd9a2
- SHA512 da3e3c82da624bd9a6451419791a31f776bc44a1062bbc6a61af41297f5c8e869d2609b6bb43c9d8c7e5102c4d93c2447a5efe347e0bdb9af1539a21a3a88b36
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:2SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1B0C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
79519c03ad163c485340d8693fca3df47c018972ba1eccf786b5660e9ad92a3b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 79519c03ad163c485340d8693fca3df47c018972ba1eccf786b5660e9ad92a3b
- Size 576KB
- SHA256 79519c03ad163c485340d8693fca3df47c018972ba1eccf786b5660e9ad92a3b
- MD5 d925af68f54a0fafe88ebd49fd54005b
- SHA1 3973db0650729f1c41d2d0ab7e8d4fe2058fd9a2
- SHA512 da3e3c82da624bd9a6451419791a31f776bc44a1062bbc6a61af41297f5c8e869d2609b6bb43c9d8c7e5102c4d93c2447a5efe347e0bdb9af1539a21a3a88b36
- SSDEEP 6144:2cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:2SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1B0C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory