General
- Target aab1085b4b47f59381d969ea7a7d10bb5100a411de53b8111264d5c95fb47549
- Size 640KB
- Sample260805-1gdjdseb66
- SHA256 aab1085b4b47f59381d969ea7a7d10bb5100a411de53b8111264d5c95fb47549
- MD5 a30e025c232d3dfe6e09940327a9c215
- SHA1 2e9fece2b1b430f7254e14b3b2cc62110bd980ce
- SHA512 a58eff9cfc65ff6808490abac9ec4f66cfcfa10e30d6aa2319d56f014e4c1fd7a6a0036b05d3b56a999dc1c49c10d46983e6609726b897e666930e37f7f9b965
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
aab1085b4b47f59381d969ea7a7d10bb5100a411de53b8111264d5c95fb47549.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target aab1085b4b47f59381d969ea7a7d10bb5100a411de53b8111264d5c95fb47549
- Size 640KB
- SHA256 aab1085b4b47f59381d969ea7a7d10bb5100a411de53b8111264d5c95fb47549
- MD5 a30e025c232d3dfe6e09940327a9c215
- SHA1 2e9fece2b1b430f7254e14b3b2cc62110bd980ce
- SHA512 a58eff9cfc65ff6808490abac9ec4f66cfcfa10e30d6aa2319d56f014e4c1fd7a6a0036b05d3b56a999dc1c49c10d46983e6609726b897e666930e37f7f9b965
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D1D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory