General
- Target 6dcef0e9f9ca39bfb4cdf3ea310564deb2085f11969ffd2f868bd60a3b12c027
- Size 1022KB
- Sample260822-23da7azhlh
- SHA256 6dcef0e9f9ca39bfb4cdf3ea310564deb2085f11969ffd2f868bd60a3b12c027
- MD5 e71e37631c910c388435b145e5d64038
- SHA1 5bc3cfafebd7a51e5f5c855e8741a74e882a70bb
- SHA512 6db9ce347c9048ece6805cec2b8b9cfe2227e8e001018b54c5cd03bcfd393cd821e254244fbeeec312cb70d16aee062073e6a8c529a4c359420fb02b54f882d4
- SSDEEP 12288:WSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEuZ9oawhtyybA:VvO2xJKRw2kOkx2LFRvcUQPxuZ98c
- TLSH T11A257C31E641C036D4A74176C6BA4BBFA578BD21432555C7E3C43A6A2FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6dcef0e9f9ca39bfb4cdf3ea310564deb2085f11969ffd2f868bd60a3b12c027.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 6dcef0e9f9ca39bfb4cdf3ea310564deb2085f11969ffd2f868bd60a3b12c027
- Size 1022KB
- SHA256 6dcef0e9f9ca39bfb4cdf3ea310564deb2085f11969ffd2f868bd60a3b12c027
- MD5 e71e37631c910c388435b145e5d64038
- SHA1 5bc3cfafebd7a51e5f5c855e8741a74e882a70bb
- SHA512 6db9ce347c9048ece6805cec2b8b9cfe2227e8e001018b54c5cd03bcfd393cd821e254244fbeeec312cb70d16aee062073e6a8c529a4c359420fb02b54f882d4
- SSDEEP 12288:WSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEuZ9oawhtyybA:VvO2xJKRw2kOkx2LFRvcUQPxuZ98c
- TLSH T11A257C31E641C036D4A74176C6BA4BBFA578BD21432555C7E3C43A6A2FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory