General
- Target 22f704f5ee8ea43b58e6f6bdbb07c555b19217978d37c4c350a20b03e20f6a63
- Size 2.9MB
- Sample260824-zjbl5stdka
- SHA256 22f704f5ee8ea43b58e6f6bdbb07c555b19217978d37c4c350a20b03e20f6a63
- MD5 8815c412e5572a4f2285dbf19844efca
- SHA1 5ec6738d8c457c49ceb2aafc6e9c02c29ecfaa72
- SHA512 e36eb1f31e44bbe8ac69c38dbb1044aac2bcc52721547b0099670ceec4117774c6c0a84bd707c94c5eecfc203d54eef01784a18a66ca5709f84e51e93d1aa9cf
- SSDEEP 49152:QHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:QnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1D8D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
22f704f5ee8ea43b58e6f6bdbb07c555b19217978d37c4c350a20b03e20f6a63.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 22f704f5ee8ea43b58e6f6bdbb07c555b19217978d37c4c350a20b03e20f6a63
- Size 2.9MB
- SHA256 22f704f5ee8ea43b58e6f6bdbb07c555b19217978d37c4c350a20b03e20f6a63
- MD5 8815c412e5572a4f2285dbf19844efca
- SHA1 5ec6738d8c457c49ceb2aafc6e9c02c29ecfaa72
- SHA512 e36eb1f31e44bbe8ac69c38dbb1044aac2bcc52721547b0099670ceec4117774c6c0a84bd707c94c5eecfc203d54eef01784a18a66ca5709f84e51e93d1aa9cf
- SSDEEP 49152:QHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:QnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1D8D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory