General
- Target 9af5eef297f63fd75c1bcd95ac5509349ee8e2fe9b3be1d9faf87505c58ff8ce
- Size 1.4MB
- Sample260826-h94bea1vfs
- SHA256 9af5eef297f63fd75c1bcd95ac5509349ee8e2fe9b3be1d9faf87505c58ff8ce
- MD5 f4b0bc31b8a3c4ea56c2e48665cbd9ba
- SHA1 1a1c2687f1d6178f9d78e648215d96651cd2b6c2
- SHA512 f8fea008a41f9393e6510b6030a19796142c3c439d33585c4c702afc8791a9aaed29495ace9545a1a0a350d7042bea50712f766c337327fa043532c39cd074e8
- SSDEEP 24576:LjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:LTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T126658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9af5eef297f63fd75c1bcd95ac5509349ee8e2fe9b3be1d9faf87505c58ff8ce.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9af5eef297f63fd75c1bcd95ac5509349ee8e2fe9b3be1d9faf87505c58ff8ce
- Size 1.4MB
- SHA256 9af5eef297f63fd75c1bcd95ac5509349ee8e2fe9b3be1d9faf87505c58ff8ce
- MD5 f4b0bc31b8a3c4ea56c2e48665cbd9ba
- SHA1 1a1c2687f1d6178f9d78e648215d96651cd2b6c2
- SHA512 f8fea008a41f9393e6510b6030a19796142c3c439d33585c4c702afc8791a9aaed29495ace9545a1a0a350d7042bea50712f766c337327fa043532c39cd074e8
- SSDEEP 24576:LjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:LTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T126658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory