General
- Target 4217e81f8e7dc28739726c5a48f145c19a01c4a7d43f48dfe1f2e9e1869305b6
- Size 1.2MB
- Sample260810-2d2bqaba23
- SHA256 4217e81f8e7dc28739726c5a48f145c19a01c4a7d43f48dfe1f2e9e1869305b6
- MD5 aa1398f4cf8edcf4b9457b44d4a37569
- SHA1 49cb4dd0c01b275ac994e09b3557f477f2a441fa
- SHA512 9117cc2dc1f23896d020fec546748d4c486d20636a83afbe7eb8a81190d8adc008c2ccd114f0d298732b8ff6e413ab73990aaffb75abaad783588c6fda870e4a
- SSDEEP 24576:lvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:lHHKe2WQXhuTtS0rQi
- TLSH T128559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4217e81f8e7dc28739726c5a48f145c19a01c4a7d43f48dfe1f2e9e1869305b6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4217e81f8e7dc28739726c5a48f145c19a01c4a7d43f48dfe1f2e9e1869305b6
- Size 1.2MB
- SHA256 4217e81f8e7dc28739726c5a48f145c19a01c4a7d43f48dfe1f2e9e1869305b6
- MD5 aa1398f4cf8edcf4b9457b44d4a37569
- SHA1 49cb4dd0c01b275ac994e09b3557f477f2a441fa
- SHA512 9117cc2dc1f23896d020fec546748d4c486d20636a83afbe7eb8a81190d8adc008c2ccd114f0d298732b8ff6e413ab73990aaffb75abaad783588c6fda870e4a
- SSDEEP 24576:lvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:lHHKe2WQXhuTtS0rQi
- TLSH T128559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory