General
- Target af85fa2e9c68d917b03a9bbfa24c5d863e8603404c6e106f5bf925f2d57d98b6
- Size 560KB
- Sample260803-para5axapg
- SHA256 af85fa2e9c68d917b03a9bbfa24c5d863e8603404c6e106f5bf925f2d57d98b6
- MD5 97ab0e8f281f983ba20f92daad098242
- SHA1 33740b7b34f4b25b4e643945d529b9c3370413e7
- SHA512 a8aeb0407311c7b34aa50271d4b03e657e2695f07fa62a5e13827e7c58e0d284c2a4c4f4f86e6a6beaeeec2e1a3cd460fe9af849c75d770ce6344fe61764559b
- SSDEEP 12288:K3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:qVOL4/gPXKCOkx2LFR
- TLSH T144C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
af85fa2e9c68d917b03a9bbfa24c5d863e8603404c6e106f5bf925f2d57d98b6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target af85fa2e9c68d917b03a9bbfa24c5d863e8603404c6e106f5bf925f2d57d98b6
- Size 560KB
- SHA256 af85fa2e9c68d917b03a9bbfa24c5d863e8603404c6e106f5bf925f2d57d98b6
- MD5 97ab0e8f281f983ba20f92daad098242
- SHA1 33740b7b34f4b25b4e643945d529b9c3370413e7
- SHA512 a8aeb0407311c7b34aa50271d4b03e657e2695f07fa62a5e13827e7c58e0d284c2a4c4f4f86e6a6beaeeec2e1a3cd460fe9af849c75d770ce6344fe61764559b
- SSDEEP 12288:K3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:qVOL4/gPXKCOkx2LFR
- TLSH T144C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory