General
- Target 0b1f74c4487f8d081ae01eae6efa68fd5ff1f19c46f356ffbe40486472b40278
- Size 1.1MB
- Sample260809-1zcptael4v
- SHA256 0b1f74c4487f8d081ae01eae6efa68fd5ff1f19c46f356ffbe40486472b40278
- MD5 2bb1a22f9196d5780693a0e0baef1677
- SHA1 64110c0906b8b751af4a16d38c73a1085fdf390a
- SHA512 d2527c4f0e3d23ca9a812430f769501bc490c2eda5cd3ee42525ecf0d85416bb0f78d74979f3b020ed3ab55f76e01e9c4667b82393ac0c58c2d37e47454e5c5f
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:pvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1D8357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0b1f74c4487f8d081ae01eae6efa68fd5ff1f19c46f356ffbe40486472b40278.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0b1f74c4487f8d081ae01eae6efa68fd5ff1f19c46f356ffbe40486472b40278
- Size 1.1MB
- SHA256 0b1f74c4487f8d081ae01eae6efa68fd5ff1f19c46f356ffbe40486472b40278
- MD5 2bb1a22f9196d5780693a0e0baef1677
- SHA1 64110c0906b8b751af4a16d38c73a1085fdf390a
- SHA512 d2527c4f0e3d23ca9a812430f769501bc490c2eda5cd3ee42525ecf0d85416bb0f78d74979f3b020ed3ab55f76e01e9c4667b82393ac0c58c2d37e47454e5c5f
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:pvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1D8357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory