General
- Target 9faef2da917b90c1c920e7d6fd92d094d9cf0582ea5380c36c5cdaa7747ec97f
- Size 1.1MB
- Sample260806-yx65jacb26
- SHA256 9faef2da917b90c1c920e7d6fd92d094d9cf0582ea5380c36c5cdaa7747ec97f
- MD5 9b1198d131ac0bafef779bd60ee1dff7
- SHA1 a7c89104ac2ab3b857c67839bf84f742f94a9015
- SHA512 68205f2099f05c1a98eec902233c38570a774edd99b6df24f55d724b09860c8f1f13327dfb3e09c71781d6acc4084b649440f3a9105b77958768ee5ec5c62bae
- SSDEEP 12288:qSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:xvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1E1357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9faef2da917b90c1c920e7d6fd92d094d9cf0582ea5380c36c5cdaa7747ec97f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9faef2da917b90c1c920e7d6fd92d094d9cf0582ea5380c36c5cdaa7747ec97f
- Size 1.1MB
- SHA256 9faef2da917b90c1c920e7d6fd92d094d9cf0582ea5380c36c5cdaa7747ec97f
- MD5 9b1198d131ac0bafef779bd60ee1dff7
- SHA1 a7c89104ac2ab3b857c67839bf84f742f94a9015
- SHA512 68205f2099f05c1a98eec902233c38570a774edd99b6df24f55d724b09860c8f1f13327dfb3e09c71781d6acc4084b649440f3a9105b77958768ee5ec5c62bae
- SSDEEP 12288:qSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:xvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1E1357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory