General
- Target 2e83df12949e52a137370f9c9551469f2256dff8033f7f15da2701de4af8394e
- Size 576KB
- Sample260822-1bgnvszbqf
- SHA256 2e83df12949e52a137370f9c9551469f2256dff8033f7f15da2701de4af8394e
- MD5 4cda6fed17ea19e4f658432ad991b7a5
- SHA1 d23fe0bd4b99e1960d640afcc6d76fcce82dcfcf
- SHA512 44f4a9679842e07f06f045c127de5ec40561388b0f6ab2f54900608a4061d24a235567e0b382bf8c47e6233142834d3412ff6cfd3555935ed72e295eb3c243ac
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:MSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T17CC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2e83df12949e52a137370f9c9551469f2256dff8033f7f15da2701de4af8394e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2e83df12949e52a137370f9c9551469f2256dff8033f7f15da2701de4af8394e
- Size 576KB
- SHA256 2e83df12949e52a137370f9c9551469f2256dff8033f7f15da2701de4af8394e
- MD5 4cda6fed17ea19e4f658432ad991b7a5
- SHA1 d23fe0bd4b99e1960d640afcc6d76fcce82dcfcf
- SHA512 44f4a9679842e07f06f045c127de5ec40561388b0f6ab2f54900608a4061d24a235567e0b382bf8c47e6233142834d3412ff6cfd3555935ed72e295eb3c243ac
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:MSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T17CC46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory