General
- Target a85d7b176253466c77fe4de21618b42973440f234ef25e14394145b04111e204
- Size 560KB
- Sample260808-p4pdma1whs
- SHA256 a85d7b176253466c77fe4de21618b42973440f234ef25e14394145b04111e204
- MD5 e2a5a9e975e12f3aefd3d4781fd91e76
- SHA1 b4adc928811798ec3fdb556d4b587ae4d32d90f6
- SHA512 a124b7f707ae99f9f7bc0311fe5f66419663b5dbe6e77eaabc15d4c38aa3cb2eeaa3092e0c86b123c1aed70fddc802706c2b5ec08404fb684afb3383b47c734d
- SSDEEP 6144:pgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:pI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T147C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a85d7b176253466c77fe4de21618b42973440f234ef25e14394145b04111e204.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a85d7b176253466c77fe4de21618b42973440f234ef25e14394145b04111e204
- Size 560KB
- SHA256 a85d7b176253466c77fe4de21618b42973440f234ef25e14394145b04111e204
- MD5 e2a5a9e975e12f3aefd3d4781fd91e76
- SHA1 b4adc928811798ec3fdb556d4b587ae4d32d90f6
- SHA512 a124b7f707ae99f9f7bc0311fe5f66419663b5dbe6e77eaabc15d4c38aa3cb2eeaa3092e0c86b123c1aed70fddc802706c2b5ec08404fb684afb3383b47c734d
- SSDEEP 6144:pgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:pI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T147C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory