General
- Target cba672310cdcf9ce8fa86b83aa86b6d3531f990e6941fe4079279f7f5de5c16b
- Size 560KB
- Sample260817-bbpl2agg87
- SHA256 cba672310cdcf9ce8fa86b83aa86b6d3531f990e6941fe4079279f7f5de5c16b
- MD5 f66fa4daf796400fe8ae5ced8ec95b3a
- SHA1 ecd907a0aaa325263f46e2f91a81837b0b0dbb8f
- SHA512 c62855818b0e9042635f4c8b15d7e2ce75e3ee996763172326bde8fe9c12486a9ada7b1333015c161e81910e15786ef6d264c597a7f6930abae93d16d78d7f38
- SSDEEP 6144:Z4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ZrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T16BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cba672310cdcf9ce8fa86b83aa86b6d3531f990e6941fe4079279f7f5de5c16b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target cba672310cdcf9ce8fa86b83aa86b6d3531f990e6941fe4079279f7f5de5c16b
- Size 560KB
- SHA256 cba672310cdcf9ce8fa86b83aa86b6d3531f990e6941fe4079279f7f5de5c16b
- MD5 f66fa4daf796400fe8ae5ced8ec95b3a
- SHA1 ecd907a0aaa325263f46e2f91a81837b0b0dbb8f
- SHA512 c62855818b0e9042635f4c8b15d7e2ce75e3ee996763172326bde8fe9c12486a9ada7b1333015c161e81910e15786ef6d264c597a7f6930abae93d16d78d7f38
- SSDEEP 6144:Z4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ZrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T16BC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory