General
- Target d6e1cf1b34f546c8f986cc599d1a1e70b0ca04d3cbe56f98bd888a5dc48d10c5
- Size 576KB
- Sample260810-1769dszelg
- SHA256 d6e1cf1b34f546c8f986cc599d1a1e70b0ca04d3cbe56f98bd888a5dc48d10c5
- MD5 f1bca0ec238d1ae587617984bf902452
- SHA1 3f57ee5010a4b8f37d0a741baafefaed1670fa69
- SHA512 e3141593ded1ed1d2ac1ed4c1b3df15e11014f8363277f4d4eb067850bef4b2c338b09d21ca4073ef68c38db2f8f45f18e8b99445b5411b85166f7d61db37b04
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:mSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1F7C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d6e1cf1b34f546c8f986cc599d1a1e70b0ca04d3cbe56f98bd888a5dc48d10c5.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d6e1cf1b34f546c8f986cc599d1a1e70b0ca04d3cbe56f98bd888a5dc48d10c5
- Size 576KB
- SHA256 d6e1cf1b34f546c8f986cc599d1a1e70b0ca04d3cbe56f98bd888a5dc48d10c5
- MD5 f1bca0ec238d1ae587617984bf902452
- SHA1 3f57ee5010a4b8f37d0a741baafefaed1670fa69
- SHA512 e3141593ded1ed1d2ac1ed4c1b3df15e11014f8363277f4d4eb067850bef4b2c338b09d21ca4073ef68c38db2f8f45f18e8b99445b5411b85166f7d61db37b04
- SSDEEP 6144:mcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:mSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1F7C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory