General
- Target 01d6a8ebb3ad635c79c7e6d50e7c490deffffe9f0700686824c6178f15bbe04f
- Size 640KB
- Sample260817-zlwp4aztcs
- SHA256 01d6a8ebb3ad635c79c7e6d50e7c490deffffe9f0700686824c6178f15bbe04f
- MD5 b6baeeaa177e5793b8d0556fbfffbf49
- SHA1 538c29eab4daede6a232dbef8468c5139874e047
- SHA512 ef2ee54f6486cdbcd785de4f1cfda3d1db31d0b2f6dc4917b54464f35f28c178e501d8f8f6a1e71a84f48097940196e8824b8807619d272d3a79ba56b1a4c467
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:lSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T162D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
01d6a8ebb3ad635c79c7e6d50e7c490deffffe9f0700686824c6178f15bbe04f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 01d6a8ebb3ad635c79c7e6d50e7c490deffffe9f0700686824c6178f15bbe04f
- Size 640KB
- SHA256 01d6a8ebb3ad635c79c7e6d50e7c490deffffe9f0700686824c6178f15bbe04f
- MD5 b6baeeaa177e5793b8d0556fbfffbf49
- SHA1 538c29eab4daede6a232dbef8468c5139874e047
- SHA512 ef2ee54f6486cdbcd785de4f1cfda3d1db31d0b2f6dc4917b54464f35f28c178e501d8f8f6a1e71a84f48097940196e8824b8807619d272d3a79ba56b1a4c467
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:lSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T162D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory