General
- Target 2f2b7ee1ed8e48e673630f477361ea541d28e00ea7ad1b593d37e9916faf1c53
- Size 2.5MB
- Sample260818-dc13kadk2z
- SHA256 2f2b7ee1ed8e48e673630f477361ea541d28e00ea7ad1b593d37e9916faf1c53
- MD5 c0685bab11365eee1d6381aad07e6a79
- SHA1 de2d8fe34572b9c365343e225953dd8ec9bef95c
- SHA512 ce17efe3704ccd7383b60b2a5d5782ebb06913f580fd321fea271986ba43134ddb7a9b224096efb0672ac33b8bd5e2d1e3569cd8f4f15c922c1886a16bfb7dac
- SSDEEP 49152:RHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:RnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T190C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2f2b7ee1ed8e48e673630f477361ea541d28e00ea7ad1b593d37e9916faf1c53.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2f2b7ee1ed8e48e673630f477361ea541d28e00ea7ad1b593d37e9916faf1c53
- Size 2.5MB
- SHA256 2f2b7ee1ed8e48e673630f477361ea541d28e00ea7ad1b593d37e9916faf1c53
- MD5 c0685bab11365eee1d6381aad07e6a79
- SHA1 de2d8fe34572b9c365343e225953dd8ec9bef95c
- SHA512 ce17efe3704ccd7383b60b2a5d5782ebb06913f580fd321fea271986ba43134ddb7a9b224096efb0672ac33b8bd5e2d1e3569cd8f4f15c922c1886a16bfb7dac
- SSDEEP 49152:RHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:RnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T190C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory