General
- Target d1b19b6b521ece6194973fa595d9b0b2583681fb0fe4b160e9f51ae0b48cc56f
- Size 2.6MB
- Sample260823-xsfw4styfz
- SHA256 d1b19b6b521ece6194973fa595d9b0b2583681fb0fe4b160e9f51ae0b48cc56f
- MD5 027536787a2ef572f56cffc70ab3f130
- SHA1 13e8e4490cbefcb55b77be5357e1802e1de9d67b
- SHA512 60aa7d474b0203133db48952e0742fdb9c7f6e8dd46b71a9dea310016187e971f3f3da9a049c1f9c71fda181b1caad955fd000c113db8be18321ce349ca6f4b7
- SSDEEP 49152:bTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:bKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T19CC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d1b19b6b521ece6194973fa595d9b0b2583681fb0fe4b160e9f51ae0b48cc56f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d1b19b6b521ece6194973fa595d9b0b2583681fb0fe4b160e9f51ae0b48cc56f
- Size 2.6MB
- SHA256 d1b19b6b521ece6194973fa595d9b0b2583681fb0fe4b160e9f51ae0b48cc56f
- MD5 027536787a2ef572f56cffc70ab3f130
- SHA1 13e8e4490cbefcb55b77be5357e1802e1de9d67b
- SHA512 60aa7d474b0203133db48952e0742fdb9c7f6e8dd46b71a9dea310016187e971f3f3da9a049c1f9c71fda181b1caad955fd000c113db8be18321ce349ca6f4b7
- SSDEEP 49152:bTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:bKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T19CC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory