General
- Target 56f62fc115d3efba6ce0d8944e1d317d042b66c41ff9b1155ee37c82f0c5c5fa
- Size 1.7MB
- Sample260807-bnd13add35
- SHA256 56f62fc115d3efba6ce0d8944e1d317d042b66c41ff9b1155ee37c82f0c5c5fa
- MD5 1b26ed19d8d296cd7cdb345165915288
- SHA1 d7972c4afe4963b88cf4b41c134ac90bda5e1155
- SHA512 0b2b4f5bc94811f93c1637d4a71df2ae2a3df0bbccc91c83d93d5120f029db9913a4da4d6c74b1a7fda0cebffec25d1481afe203a69fd8634129a8e658c009db
- SSDEEP 24576:JvO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:JHHKX2WQt5QZuTtS0rQMYOQ+q8CE0I
- TLSH T160859E21B791C036D4AB01758AB98BAEA578BD31072551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
56f62fc115d3efba6ce0d8944e1d317d042b66c41ff9b1155ee37c82f0c5c5fa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 56f62fc115d3efba6ce0d8944e1d317d042b66c41ff9b1155ee37c82f0c5c5fa
- Size 1.7MB
- SHA256 56f62fc115d3efba6ce0d8944e1d317d042b66c41ff9b1155ee37c82f0c5c5fa
- MD5 1b26ed19d8d296cd7cdb345165915288
- SHA1 d7972c4afe4963b88cf4b41c134ac90bda5e1155
- SHA512 0b2b4f5bc94811f93c1637d4a71df2ae2a3df0bbccc91c83d93d5120f029db9913a4da4d6c74b1a7fda0cebffec25d1481afe203a69fd8634129a8e658c009db
- SSDEEP 24576:JvO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:JHHKX2WQt5QZuTtS0rQMYOQ+q8CE0I
- TLSH T160859E21B791C036D4AB01758AB98BAEA578BD31072551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory