General
- Target a0911972a2af9c5b643d6e019f1057fcf99328c913ff0583bf7131a6e1f09c01
- Size 560KB
- Sample260810-kh2dvadr3y
- SHA256 a0911972a2af9c5b643d6e019f1057fcf99328c913ff0583bf7131a6e1f09c01
- MD5 01ba1748905e73f9c3bba2688fde1c96
- SHA1 48aa22b42fa7b5b76371bbfeef8d85abfce9db37
- SHA512 65bb7ecd86b83fcbc4dd1caa791865d330f92f9bdfa14ad965a1a7c46bc5fdfc446c9dda91683f462a7a39776812bd6398178c956ac6fe97aebfc6df782cc572
- SSDEEP 6144:RUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:RYsVOdhElvkCgvDLe4usOkxHy
- TLSH T16AC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a0911972a2af9c5b643d6e019f1057fcf99328c913ff0583bf7131a6e1f09c01.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a0911972a2af9c5b643d6e019f1057fcf99328c913ff0583bf7131a6e1f09c01
- Size 560KB
- SHA256 a0911972a2af9c5b643d6e019f1057fcf99328c913ff0583bf7131a6e1f09c01
- MD5 01ba1748905e73f9c3bba2688fde1c96
- SHA1 48aa22b42fa7b5b76371bbfeef8d85abfce9db37
- SHA512 65bb7ecd86b83fcbc4dd1caa791865d330f92f9bdfa14ad965a1a7c46bc5fdfc446c9dda91683f462a7a39776812bd6398178c956ac6fe97aebfc6df782cc572
- SSDEEP 6144:RUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:RYsVOdhElvkCgvDLe4usOkxHy
- TLSH T16AC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory