General
- Target 1bc13cf6abd31eab112423786b6a502c91124708e82e0e9c8ee30dabe919a412
- Size 576KB
- Sample260819-gklvdsdc73
- SHA256 1bc13cf6abd31eab112423786b6a502c91124708e82e0e9c8ee30dabe919a412
- MD5 12f936f98dd1e0c591ee7f555277559d
- SHA1 25f123b4f2d804693cc05d52410b9a6b5c3f3078
- SHA512 eebba8b7d2c55ae609e19ec8c3dada3b0e2a623be0e74acdd1c4d4b2ada400ad6374c53d2522355fde514779f0f8760cf40d19e224f3a65428ec8d2a100113e0
- SSDEEP 6144:VcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:VSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19EC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1bc13cf6abd31eab112423786b6a502c91124708e82e0e9c8ee30dabe919a412.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1bc13cf6abd31eab112423786b6a502c91124708e82e0e9c8ee30dabe919a412
- Size 576KB
- SHA256 1bc13cf6abd31eab112423786b6a502c91124708e82e0e9c8ee30dabe919a412
- MD5 12f936f98dd1e0c591ee7f555277559d
- SHA1 25f123b4f2d804693cc05d52410b9a6b5c3f3078
- SHA512 eebba8b7d2c55ae609e19ec8c3dada3b0e2a623be0e74acdd1c4d4b2ada400ad6374c53d2522355fde514779f0f8760cf40d19e224f3a65428ec8d2a100113e0
- SSDEEP 6144:VcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:VSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T19EC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory