General
- Target cb42e32175ac296926ed16fbec93c533ddc288f14f580c3adc1a1b0cac1b2370
- Size 1.7MB
- Sample260808-3wnzsazzbw
- SHA256 cb42e32175ac296926ed16fbec93c533ddc288f14f580c3adc1a1b0cac1b2370
- MD5 acde70c74eeb6e456db50810b3d5c9d9
- SHA1 b0cfb0c02a6571a94d9d91af46c4d32e6ce3e5ef
- SHA512 32f60cc4d4f2bdb2536e9b9c041e7b65aa580441bcae04ef8deda073d665c78a803c8a17a7a6e4f697134a2221c74bc207f44227f1da69b06a0e6cdf61b0d3e5
- SSDEEP 24576:9vO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:9HHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T168858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cb42e32175ac296926ed16fbec93c533ddc288f14f580c3adc1a1b0cac1b2370.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target cb42e32175ac296926ed16fbec93c533ddc288f14f580c3adc1a1b0cac1b2370
- Size 1.7MB
- SHA256 cb42e32175ac296926ed16fbec93c533ddc288f14f580c3adc1a1b0cac1b2370
- MD5 acde70c74eeb6e456db50810b3d5c9d9
- SHA1 b0cfb0c02a6571a94d9d91af46c4d32e6ce3e5ef
- SHA512 32f60cc4d4f2bdb2536e9b9c041e7b65aa580441bcae04ef8deda073d665c78a803c8a17a7a6e4f697134a2221c74bc207f44227f1da69b06a0e6cdf61b0d3e5
- SSDEEP 24576:9vO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:9HHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T168858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory