General
- Target 1830bee8cbf4b4636fd0f7a8e060c2c2a9ccd716e0a925c8c293f5f8b4e5d21f
- Size 640KB
- Sample260809-1xndjawfkb
- SHA256 1830bee8cbf4b4636fd0f7a8e060c2c2a9ccd716e0a925c8c293f5f8b4e5d21f
- MD5 28845ddbc0104b55082dbd23ffa9e40f
- SHA1 bc6873798c7d72139d1edd99728aeab38d1ecce0
- SHA512 6e0da9a8ec85579381c3506e391b395061ed6bd953b95be341b24c82acf0c21608524a5b6a45ae32c429a50958ed1641ee003f6f7c94bbf9f533daa51c5af66a
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:DSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T173D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1830bee8cbf4b4636fd0f7a8e060c2c2a9ccd716e0a925c8c293f5f8b4e5d21f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1830bee8cbf4b4636fd0f7a8e060c2c2a9ccd716e0a925c8c293f5f8b4e5d21f
- Size 640KB
- SHA256 1830bee8cbf4b4636fd0f7a8e060c2c2a9ccd716e0a925c8c293f5f8b4e5d21f
- MD5 28845ddbc0104b55082dbd23ffa9e40f
- SHA1 bc6873798c7d72139d1edd99728aeab38d1ecce0
- SHA512 6e0da9a8ec85579381c3506e391b395061ed6bd953b95be341b24c82acf0c21608524a5b6a45ae32c429a50958ed1641ee003f6f7c94bbf9f533daa51c5af66a
- SSDEEP 6144:DcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:DSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T173D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory