General
- Target f29260ed521ea147b00b3817b719a100ef4dd1dbff950e5d6df8e386b49617f2
- Size 560KB
- Sample260807-vasrvaswc1
- SHA256 f29260ed521ea147b00b3817b719a100ef4dd1dbff950e5d6df8e386b49617f2
- MD5 e871bab36d7aa71f0bc328f59a9b69f9
- SHA1 3e6f978d1009d86cc21a6c3087283fe8c350527a
- SHA512 fc5e77bca619a7530691d5136bbeb1b1c1aaf2218797c0fba11d6ad8e2b4040e8fdc2d396cb9352f1dc3f15e746fc634a75f93dd5f34ba915e0340608cff7831
- SSDEEP 6144:/WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:/kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1DAC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f29260ed521ea147b00b3817b719a100ef4dd1dbff950e5d6df8e386b49617f2.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f29260ed521ea147b00b3817b719a100ef4dd1dbff950e5d6df8e386b49617f2
- Size 560KB
- SHA256 f29260ed521ea147b00b3817b719a100ef4dd1dbff950e5d6df8e386b49617f2
- MD5 e871bab36d7aa71f0bc328f59a9b69f9
- SHA1 3e6f978d1009d86cc21a6c3087283fe8c350527a
- SHA512 fc5e77bca619a7530691d5136bbeb1b1c1aaf2218797c0fba11d6ad8e2b4040e8fdc2d396cb9352f1dc3f15e746fc634a75f93dd5f34ba915e0340608cff7831
- SSDEEP 6144:/WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:/kCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1DAC47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory