General
- Target 9c2b617f392168a748c3f9e66c110b87f2b02de38f2a117d1d7d09c4536f5aac
- Size 1.7MB
- Sample260815-1gcxvsvvfv
- SHA256 9c2b617f392168a748c3f9e66c110b87f2b02de38f2a117d1d7d09c4536f5aac
- MD5 c785e7dca388b1910c30bb60af329964
- SHA1 a9c58531c1e07863ffd57081f58a9eb8c28d786b
- SHA512 10975ff415b48421c1947c84eb7c21a1f91f87859ea90d3c8115efb709ba1addee601960847c1211cd73f469d3180247a21ff9ddb9c6fd7778de64ddf4b3f047
- SSDEEP 24576:uvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:uHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T1BC858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9c2b617f392168a748c3f9e66c110b87f2b02de38f2a117d1d7d09c4536f5aac.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9c2b617f392168a748c3f9e66c110b87f2b02de38f2a117d1d7d09c4536f5aac
- Size 1.7MB
- SHA256 9c2b617f392168a748c3f9e66c110b87f2b02de38f2a117d1d7d09c4536f5aac
- MD5 c785e7dca388b1910c30bb60af329964
- SHA1 a9c58531c1e07863ffd57081f58a9eb8c28d786b
- SHA512 10975ff415b48421c1947c84eb7c21a1f91f87859ea90d3c8115efb709ba1addee601960847c1211cd73f469d3180247a21ff9ddb9c6fd7778de64ddf4b3f047
- SSDEEP 24576:uvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:uHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T1BC858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory