General
- Target 2a3c9deb9b74524dcf2e6413c291f0d64997cf0b56fd034932d2f6fe27df9b66
- Size 2.5MB
- Sample260819-ym5hysvthy
- SHA256 2a3c9deb9b74524dcf2e6413c291f0d64997cf0b56fd034932d2f6fe27df9b66
- MD5 5fcc5585ecd09923adedf3bbeeb6fb45
- SHA1 078c0500a39f076cc22050e134e316b66e801f6a
- SHA512 936662db3933c6dfaabf5c7d9668cc6bfcc66f3dabc96f270cbc962fd9ef661b97b95554ba0fbec023fcd0110105c4ce6110641766626303701f396e74c36173
- SSDEEP 49152:QHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:QnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T18BC58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2a3c9deb9b74524dcf2e6413c291f0d64997cf0b56fd034932d2f6fe27df9b66.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2a3c9deb9b74524dcf2e6413c291f0d64997cf0b56fd034932d2f6fe27df9b66
- Size 2.5MB
- SHA256 2a3c9deb9b74524dcf2e6413c291f0d64997cf0b56fd034932d2f6fe27df9b66
- MD5 5fcc5585ecd09923adedf3bbeeb6fb45
- SHA1 078c0500a39f076cc22050e134e316b66e801f6a
- SHA512 936662db3933c6dfaabf5c7d9668cc6bfcc66f3dabc96f270cbc962fd9ef661b97b95554ba0fbec023fcd0110105c4ce6110641766626303701f396e74c36173
- SSDEEP 49152:QHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:QnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T18BC58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory