General
- Target 2ba933ba9ba9d0c84f457e9087559fc3b9d3f612fedc15bc5d1b61380c0b48f7
- Size 560KB
- Sample260818-dasneavzcs
- SHA256 2ba933ba9ba9d0c84f457e9087559fc3b9d3f612fedc15bc5d1b61380c0b48f7
- MD5 3991893a1ca84f02871df13e8ff5f395
- SHA1 6805411dbe5b3f7d748ca5920b320adf41299e58
- SHA512 3da2e126e86480feaa02e0edd1e955820f460bc1251b0241bf9f161576f1eebe9d9753259ffc974e0ef73553283f2d34b0523a7448a6e82687b2444ba6849f83
- SSDEEP 6144:D6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:DO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T166C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2ba933ba9ba9d0c84f457e9087559fc3b9d3f612fedc15bc5d1b61380c0b48f7.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2ba933ba9ba9d0c84f457e9087559fc3b9d3f612fedc15bc5d1b61380c0b48f7
- Size 560KB
- SHA256 2ba933ba9ba9d0c84f457e9087559fc3b9d3f612fedc15bc5d1b61380c0b48f7
- MD5 3991893a1ca84f02871df13e8ff5f395
- SHA1 6805411dbe5b3f7d748ca5920b320adf41299e58
- SHA512 3da2e126e86480feaa02e0edd1e955820f460bc1251b0241bf9f161576f1eebe9d9753259ffc974e0ef73553283f2d34b0523a7448a6e82687b2444ba6849f83
- SSDEEP 6144:D6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:DO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T166C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory