General
- Target 20a9db88c757452a93fe69ad290c8a4d62aa9ca823bf8cd1cb2c7d3b7cf0587f
- Size 640KB
- Sample260809-hk611abj5y
- SHA256 20a9db88c757452a93fe69ad290c8a4d62aa9ca823bf8cd1cb2c7d3b7cf0587f
- MD5 a36292f484d54bdb5afc74be8c97a655
- SHA1 42cc2b687774aad2df0a19f4f28b955ab4495e77
- SHA512 36a3fbd5656bf76087fd7a80f9710098a6cbe3f12fc49b827af034cb23bde6178423163dbed34582ec0097c46089c53b25522ff35c72cfbeb683d4fdde0dd7c8
- SSDEEP 6144:tScTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:cSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T167D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
20a9db88c757452a93fe69ad290c8a4d62aa9ca823bf8cd1cb2c7d3b7cf0587f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 20a9db88c757452a93fe69ad290c8a4d62aa9ca823bf8cd1cb2c7d3b7cf0587f
- Size 640KB
- SHA256 20a9db88c757452a93fe69ad290c8a4d62aa9ca823bf8cd1cb2c7d3b7cf0587f
- MD5 a36292f484d54bdb5afc74be8c97a655
- SHA1 42cc2b687774aad2df0a19f4f28b955ab4495e77
- SHA512 36a3fbd5656bf76087fd7a80f9710098a6cbe3f12fc49b827af034cb23bde6178423163dbed34582ec0097c46089c53b25522ff35c72cfbeb683d4fdde0dd7c8
- SSDEEP 6144:tScTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:cSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T167D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory