General
- Target ee271a11cd62e03832bc168b8b4e2648c06d1b8c878e084838b9e9f48fba4d27
- Size 560KB
- Sample260811-yphf7szgrb
- SHA256 ee271a11cd62e03832bc168b8b4e2648c06d1b8c878e084838b9e9f48fba4d27
- MD5 4673237479492d33ba143e8760c2db2b
- SHA1 178bceb67d1c377bc5dde904b77301c642b8ce58
- SHA512 fcfcc3a157ca09a60d41b44c4d49c926692dc0d14f013cbb59b55090779cdf5cf94dcd7abfb64874cc41e38317f89ad31a0fc0ccfba2fae8dfc17eac97e70561
- SSDEEP 6144:8WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:8kCO2zVPX7vf1LKlIsOkxHy
- TLSH T104C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ee271a11cd62e03832bc168b8b4e2648c06d1b8c878e084838b9e9f48fba4d27.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ee271a11cd62e03832bc168b8b4e2648c06d1b8c878e084838b9e9f48fba4d27
- Size 560KB
- SHA256 ee271a11cd62e03832bc168b8b4e2648c06d1b8c878e084838b9e9f48fba4d27
- MD5 4673237479492d33ba143e8760c2db2b
- SHA1 178bceb67d1c377bc5dde904b77301c642b8ce58
- SHA512 fcfcc3a157ca09a60d41b44c4d49c926692dc0d14f013cbb59b55090779cdf5cf94dcd7abfb64874cc41e38317f89ad31a0fc0ccfba2fae8dfc17eac97e70561
- SSDEEP 6144:8WVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:8kCO2zVPX7vf1LKlIsOkxHy
- TLSH T104C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory