General
- Target 3511bef4a01a8e69f3ff9299e7028c74b5f9c4b7c7e836e2b19e910f6481baf7
- Size 560KB
- Sample260808-kwkcgsxtdx
- SHA256 3511bef4a01a8e69f3ff9299e7028c74b5f9c4b7c7e836e2b19e910f6481baf7
- MD5 df5184b79caf9b3d01b3200a32bd176d
- SHA1 25631b8ee21a7fbe343cee5617330e79699e5843
- SHA512 d46826b14159a6647e76e640d0c14a183f238d8d9bc61a74b935789351336646a22e8b4614970c8f3f8648ba4c8977290b24815f2b9efad7f642cf229eee0f23
- SSDEEP 6144:FWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:FkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T180C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3511bef4a01a8e69f3ff9299e7028c74b5f9c4b7c7e836e2b19e910f6481baf7.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 3511bef4a01a8e69f3ff9299e7028c74b5f9c4b7c7e836e2b19e910f6481baf7
- Size 560KB
- SHA256 3511bef4a01a8e69f3ff9299e7028c74b5f9c4b7c7e836e2b19e910f6481baf7
- MD5 df5184b79caf9b3d01b3200a32bd176d
- SHA1 25631b8ee21a7fbe343cee5617330e79699e5843
- SHA512 d46826b14159a6647e76e640d0c14a183f238d8d9bc61a74b935789351336646a22e8b4614970c8f3f8648ba4c8977290b24815f2b9efad7f642cf229eee0f23
- SSDEEP 6144:FWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:FkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T180C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory