General
- Target d9b5bd58af4fc34fa9d32d0c96c7b4183ffab5045ff105656bb094e1f798aba7
- Size 1.2MB
- Sample260807-afyvtstena
- SHA256 d9b5bd58af4fc34fa9d32d0c96c7b4183ffab5045ff105656bb094e1f798aba7
- MD5 c21a6c216bd085ec6ae860cb45813e14
- SHA1 c405a00c5c6339aa4ee96ec3242b11afb1b6b80f
- SHA512 35c9baf1254aec15dfef17ef334186268748be0e8979fde1e6f5866a12891ae1f45fd68763dc8b2f993aa48863bf77912ae97f456359bc12307869a18d100cfc
- SSDEEP 24576:IvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:IHHKe2WQXhuTtS0rQi
- TLSH T1DE559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d9b5bd58af4fc34fa9d32d0c96c7b4183ffab5045ff105656bb094e1f798aba7.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d9b5bd58af4fc34fa9d32d0c96c7b4183ffab5045ff105656bb094e1f798aba7
- Size 1.2MB
- SHA256 d9b5bd58af4fc34fa9d32d0c96c7b4183ffab5045ff105656bb094e1f798aba7
- MD5 c21a6c216bd085ec6ae860cb45813e14
- SHA1 c405a00c5c6339aa4ee96ec3242b11afb1b6b80f
- SHA512 35c9baf1254aec15dfef17ef334186268748be0e8979fde1e6f5866a12891ae1f45fd68763dc8b2f993aa48863bf77912ae97f456359bc12307869a18d100cfc
- SSDEEP 24576:IvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:IHHKe2WQXhuTtS0rQi
- TLSH T1DE559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory