General
- Target 9b8d09216618c40dc15afe7ddade8e63dcd0f8d5e8ff5c6a465627a346d54004
- Size 560KB
- Sample260823-233ababk91
- SHA256 9b8d09216618c40dc15afe7ddade8e63dcd0f8d5e8ff5c6a465627a346d54004
- MD5 00c78ea17bf1ea7d52a3d472a9bc73a3
- SHA1 cf3386b61498272492aecbd64d7086fdf148cf64
- SHA512 22525fa8933e6251f9a00c9213cb7132df33c5bd32909e829faf5d2ee42c8e1e55e75320d6f6007af180e2a2abc048c89668e58dc8e1636fc0b555dcb4d130e4
- SSDEEP 6144:v4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:vrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1EEC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9b8d09216618c40dc15afe7ddade8e63dcd0f8d5e8ff5c6a465627a346d54004.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9b8d09216618c40dc15afe7ddade8e63dcd0f8d5e8ff5c6a465627a346d54004
- Size 560KB
- SHA256 9b8d09216618c40dc15afe7ddade8e63dcd0f8d5e8ff5c6a465627a346d54004
- MD5 00c78ea17bf1ea7d52a3d472a9bc73a3
- SHA1 cf3386b61498272492aecbd64d7086fdf148cf64
- SHA512 22525fa8933e6251f9a00c9213cb7132df33c5bd32909e829faf5d2ee42c8e1e55e75320d6f6007af180e2a2abc048c89668e58dc8e1636fc0b555dcb4d130e4
- SSDEEP 6144:v4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:vrNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1EEC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory