General
- Target dff01c2f0fc9b3177f43762528c4e459d9b47c454019047d7834a84df03525af
- Size 640KB
- Sample260806-z3fp7styht
- SHA256 dff01c2f0fc9b3177f43762528c4e459d9b47c454019047d7834a84df03525af
- MD5 e1e8ddca489278135ac287e74b878598
- SHA1 b9236ddffb1811a4b6faf0689bada63040141bc9
- SHA512 2f0d8e927ab848a7ed3ecff516945b84956ba7cbe9749292b185a063d266de3c63155628fb92a06ba8dbc358764b49dfa41432c93e3b323fe7899e415f005a5c
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:nSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dff01c2f0fc9b3177f43762528c4e459d9b47c454019047d7834a84df03525af.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target dff01c2f0fc9b3177f43762528c4e459d9b47c454019047d7834a84df03525af
- Size 640KB
- SHA256 dff01c2f0fc9b3177f43762528c4e459d9b47c454019047d7834a84df03525af
- MD5 e1e8ddca489278135ac287e74b878598
- SHA1 b9236ddffb1811a4b6faf0689bada63040141bc9
- SHA512 2f0d8e927ab848a7ed3ecff516945b84956ba7cbe9749292b185a063d266de3c63155628fb92a06ba8dbc358764b49dfa41432c93e3b323fe7899e415f005a5c
- SSDEEP 6144:ncTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:nSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1C7D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory