General
- Target 0e28c5c9871d9281dcd5b80ec7f24543907cd12fbcfd1382c656180f3bb993c8
- Size 1.1MB
- Sample260822-1e17nszckd
- SHA256 0e28c5c9871d9281dcd5b80ec7f24543907cd12fbcfd1382c656180f3bb993c8
- MD5 3e7df65031463962d839c5b9e9ff4a3c
- SHA1 995119f984d50444c940f00ee3565f088e0acfc0
- SHA512 c37c62cbdcc7c0f8ec612a9e2a224eacf14c84fe2260822dde9f3a7dd4772fceaf27b7e2906a10b92b4df4ee3c61697c04e453c89bfde2ddec746c73cd852893
- SSDEEP 12288:wSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:rvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T187357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0e28c5c9871d9281dcd5b80ec7f24543907cd12fbcfd1382c656180f3bb993c8.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0e28c5c9871d9281dcd5b80ec7f24543907cd12fbcfd1382c656180f3bb993c8
- Size 1.1MB
- SHA256 0e28c5c9871d9281dcd5b80ec7f24543907cd12fbcfd1382c656180f3bb993c8
- MD5 3e7df65031463962d839c5b9e9ff4a3c
- SHA1 995119f984d50444c940f00ee3565f088e0acfc0
- SHA512 c37c62cbdcc7c0f8ec612a9e2a224eacf14c84fe2260822dde9f3a7dd4772fceaf27b7e2906a10b92b4df4ee3c61697c04e453c89bfde2ddec746c73cd852893
- SSDEEP 12288:wSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:rvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T187357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory