General
- Target 06de1bc3da6d3a792ae53c9acaff905025c0042fa95b080d8bbe55e1305fa6e5
- Size 576KB
- Sample260809-1zgnrsztey
- SHA256 06de1bc3da6d3a792ae53c9acaff905025c0042fa95b080d8bbe55e1305fa6e5
- MD5 fc0f4a1f77a1bdc6f2938d11d2c548cb
- SHA1 0c2f19eb8696a218848dd61dac278a0c86217f78
- SHA512 6114db4e7307c9638adfb6bc85e8ea0132341ae32673731accf589647d0984a93f307095e041236dec440809ada72d3568a62116cc140f1a5559a5ce1e04f79f
- SSDEEP 6144:pcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:pSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1DAC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
06de1bc3da6d3a792ae53c9acaff905025c0042fa95b080d8bbe55e1305fa6e5.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 06de1bc3da6d3a792ae53c9acaff905025c0042fa95b080d8bbe55e1305fa6e5
- Size 576KB
- SHA256 06de1bc3da6d3a792ae53c9acaff905025c0042fa95b080d8bbe55e1305fa6e5
- MD5 fc0f4a1f77a1bdc6f2938d11d2c548cb
- SHA1 0c2f19eb8696a218848dd61dac278a0c86217f78
- SHA512 6114db4e7307c9638adfb6bc85e8ea0132341ae32673731accf589647d0984a93f307095e041236dec440809ada72d3568a62116cc140f1a5559a5ce1e04f79f
- SSDEEP 6144:pcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:pSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1DAC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory