General
- Target ae12f722591027a3fd150a4547a3620d35bc4ed333f7b0fdeaa183a54955f79a
- Size 640KB
- Sample260817-bb9bfa1ald
- SHA256 ae12f722591027a3fd150a4547a3620d35bc4ed333f7b0fdeaa183a54955f79a
- MD5 14f0b66485f97a161b994f2c2f5b6e35
- SHA1 c97c1783b98c47f676ad0f4523400404ecb4d95e
- SHA512 d4c17e4f77db2641232bef678a678809b8c4b5d2c0054ab94972d624b8e94928b6396edf3faa42ceb3f29e7b38d1be00235a5cebe2ec6317355eea2738eb6ea7
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:xSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T132D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ae12f722591027a3fd150a4547a3620d35bc4ed333f7b0fdeaa183a54955f79a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ae12f722591027a3fd150a4547a3620d35bc4ed333f7b0fdeaa183a54955f79a
- Size 640KB
- SHA256 ae12f722591027a3fd150a4547a3620d35bc4ed333f7b0fdeaa183a54955f79a
- MD5 14f0b66485f97a161b994f2c2f5b6e35
- SHA1 c97c1783b98c47f676ad0f4523400404ecb4d95e
- SHA512 d4c17e4f77db2641232bef678a678809b8c4b5d2c0054ab94972d624b8e94928b6396edf3faa42ceb3f29e7b38d1be00235a5cebe2ec6317355eea2738eb6ea7
- SSDEEP 6144:xcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:xSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T132D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory