General
- Target 3b99ffb9312cd8cb9825c572c5b25c88c8a3b63ef9d7747110f7263894f48ab8
- Size 1.2MB
- Sample260818-hpszyafp2w
- SHA256 3b99ffb9312cd8cb9825c572c5b25c88c8a3b63ef9d7747110f7263894f48ab8
- MD5 d0bd4f366ebe92fb3f6cb61e2aa899a7
- SHA1 07177cc644fd45266710969aee8eadd84f02ad0f
- SHA512 2d86f3cc9aaad0b72306ccd503cbb8d4f019445ae0209454704fdf2de8bfad01d50607d333c28a29729649e4c2736119416c327cb029f95e50f5215f49870d4c
- SSDEEP 24576:evO2xJKRw2kOkx2LFRvcUQPxuZ98Es8k3OH3C0rQS:eHHKe2WQX5QZuTtS0rQS
- TLSH T1E4458C31E641C036D4A70175C6BA4BBFA9787D25032565C7E3D43E6A2FB22D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3b99ffb9312cd8cb9825c572c5b25c88c8a3b63ef9d7747110f7263894f48ab8.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 3b99ffb9312cd8cb9825c572c5b25c88c8a3b63ef9d7747110f7263894f48ab8
- Size 1.2MB
- SHA256 3b99ffb9312cd8cb9825c572c5b25c88c8a3b63ef9d7747110f7263894f48ab8
- MD5 d0bd4f366ebe92fb3f6cb61e2aa899a7
- SHA1 07177cc644fd45266710969aee8eadd84f02ad0f
- SHA512 2d86f3cc9aaad0b72306ccd503cbb8d4f019445ae0209454704fdf2de8bfad01d50607d333c28a29729649e4c2736119416c327cb029f95e50f5215f49870d4c
- SSDEEP 24576:evO2xJKRw2kOkx2LFRvcUQPxuZ98Es8k3OH3C0rQS:eHHKe2WQX5QZuTtS0rQS
- TLSH T1E4458C31E641C036D4A70175C6BA4BBFA9787D25032565C7E3D43E6A2FB22D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory