General
- Target 99cd4a694f268082fef11c61a6e04536c3829bbd46a7c37264a05b8e41dfa0b6
- Size 560KB
- Sample260817-xf4gmsdb96
- SHA256 99cd4a694f268082fef11c61a6e04536c3829bbd46a7c37264a05b8e41dfa0b6
- MD5 7a71042788a0f50b113e2c09298dc00c
- SHA1 9ba618a432f10077ece9a7e38df9df9d0d544662
- SHA512 5728fa0ae85020c45b7dc9c0fe1a49e0d3e242bafa065b664ccd48192044f59ca39323132e9d66a8175eade05c286fe245cf3264825c0320032da9ed479a8bc5
- SSDEEP 6144:rUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:rYsVOdhElvkCgvDLe4usOkxHy
- TLSH T143C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
99cd4a694f268082fef11c61a6e04536c3829bbd46a7c37264a05b8e41dfa0b6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 99cd4a694f268082fef11c61a6e04536c3829bbd46a7c37264a05b8e41dfa0b6
- Size 560KB
- SHA256 99cd4a694f268082fef11c61a6e04536c3829bbd46a7c37264a05b8e41dfa0b6
- MD5 7a71042788a0f50b113e2c09298dc00c
- SHA1 9ba618a432f10077ece9a7e38df9df9d0d544662
- SHA512 5728fa0ae85020c45b7dc9c0fe1a49e0d3e242bafa065b664ccd48192044f59ca39323132e9d66a8175eade05c286fe245cf3264825c0320032da9ed479a8bc5
- SSDEEP 6144:rUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:rYsVOdhElvkCgvDLe4usOkxHy
- TLSH T143C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory