General
- Target 0fd4fbdad410c4ba976d472b7a1dc51e4b4e5932d05d93bd74aeec0eb00a59cb
- Size 525KB
- Sample260802-xx91raef45
- SHA256 0fd4fbdad410c4ba976d472b7a1dc51e4b4e5932d05d93bd74aeec0eb00a59cb
- MD5 a40a21fbb5d3d45da66a8bf73f197f48
- SHA1 7a791af75080c043f27838405e5270e3db14174a
- SHA512 2be007d1954c457b1e3c14f67ac4f3c2578762216f9629c7f011d0affdef211591fc8ceb474cf1d0ea6e3cb15e34c84a3552b35523058495671548b98c79470d
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:xSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T19AB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0fd4fbdad410c4ba976d472b7a1dc51e4b4e5932d05d93bd74aeec0eb00a59cb.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0fd4fbdad410c4ba976d472b7a1dc51e4b4e5932d05d93bd74aeec0eb00a59cb
- Size 525KB
- SHA256 0fd4fbdad410c4ba976d472b7a1dc51e4b4e5932d05d93bd74aeec0eb00a59cb
- MD5 a40a21fbb5d3d45da66a8bf73f197f48
- SHA1 7a791af75080c043f27838405e5270e3db14174a
- SHA512 2be007d1954c457b1e3c14f67ac4f3c2578762216f9629c7f011d0affdef211591fc8ceb474cf1d0ea6e3cb15e34c84a3552b35523058495671548b98c79470d
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:xSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T19AB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory