General
- Target 61deb8d9e6aaa4e34526b5d72fc61123517a314c95285f65d42d513bd721b967
- Size 761KB
- Sample260802-ytwjmafm41
- SHA256 61deb8d9e6aaa4e34526b5d72fc61123517a314c95285f65d42d513bd721b967
- MD5 dff8a7351a37eaca7d612a0700ae9a8c
- SHA1 41f1c57ef7a34fb04c063f1e342654b010ffe793
- SHA512 b3a9d45ef61b63f8d50c922ac1c1382aac6c324956c57b00964045fffa0936483a6f26422465352397777b14204a238c0bae5b3ff1eedfbc33a36f7e059ad039
- SSDEEP 12288:TSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:mvO2xJKRw2kOkxSkW298B
- TLSH T1C7F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
61deb8d9e6aaa4e34526b5d72fc61123517a314c95285f65d42d513bd721b967.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 61deb8d9e6aaa4e34526b5d72fc61123517a314c95285f65d42d513bd721b967
- Size 761KB
- SHA256 61deb8d9e6aaa4e34526b5d72fc61123517a314c95285f65d42d513bd721b967
- MD5 dff8a7351a37eaca7d612a0700ae9a8c
- SHA1 41f1c57ef7a34fb04c063f1e342654b010ffe793
- SHA512 b3a9d45ef61b63f8d50c922ac1c1382aac6c324956c57b00964045fffa0936483a6f26422465352397777b14204a238c0bae5b3ff1eedfbc33a36f7e059ad039
- SSDEEP 12288:TSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:mvO2xJKRw2kOkxSkW298B
- TLSH T1C7F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory