General
- Target 491462e81f4e11a65b4c7baef6b2518333b536ac8ee53c4a7167bfb3f769ed7d
- Size 560KB
- Sample260805-1mtgssswbv
- SHA256 491462e81f4e11a65b4c7baef6b2518333b536ac8ee53c4a7167bfb3f769ed7d
- MD5 1daaa59c109ab5332cd82b8cd48e62db
- SHA1 77cec18f03c2a980ec68d69da40a716da1faae4e
- SHA512 da7549cda19a392fd4b1967b49bb10941ce4ac000051c2348cbf2dd5be2701c447ac2ea2470a8dc85a703a60bb83dfb7c52da2f8a11164efd99e8508fc5de747
- SSDEEP 6144:cWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ckCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T142C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
491462e81f4e11a65b4c7baef6b2518333b536ac8ee53c4a7167bfb3f769ed7d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 491462e81f4e11a65b4c7baef6b2518333b536ac8ee53c4a7167bfb3f769ed7d
- Size 560KB
- SHA256 491462e81f4e11a65b4c7baef6b2518333b536ac8ee53c4a7167bfb3f769ed7d
- MD5 1daaa59c109ab5332cd82b8cd48e62db
- SHA1 77cec18f03c2a980ec68d69da40a716da1faae4e
- SHA512 da7549cda19a392fd4b1967b49bb10941ce4ac000051c2348cbf2dd5be2701c447ac2ea2470a8dc85a703a60bb83dfb7c52da2f8a11164efd99e8508fc5de747
- SSDEEP 6144:cWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:ckCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T142C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory