General
- Target ca0485e5437242cca883960ded59e9de622ff3468fe8660c77d4dadd24c265df
- Size 560KB
- Sample260826-mrf6datygv
- SHA256 ca0485e5437242cca883960ded59e9de622ff3468fe8660c77d4dadd24c265df
- MD5 392927a961dfeb351d4d52a7a664b7b9
- SHA1 179c6351dd353befa14b395d256ffce4de3f6600
- SHA512 0f8d9f9a73c361349fd44f13a6f6d84c6168aac745504a6cdb4f5c59df0f4f6b59bc82d8a721216ee2b1710d17f2b12142cdf49bda88c915face7ea12a2c536e
- SSDEEP 6144:ngye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:nI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T11FC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ca0485e5437242cca883960ded59e9de622ff3468fe8660c77d4dadd24c265df.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ca0485e5437242cca883960ded59e9de622ff3468fe8660c77d4dadd24c265df
- Size 560KB
- SHA256 ca0485e5437242cca883960ded59e9de622ff3468fe8660c77d4dadd24c265df
- MD5 392927a961dfeb351d4d52a7a664b7b9
- SHA1 179c6351dd353befa14b395d256ffce4de3f6600
- SHA512 0f8d9f9a73c361349fd44f13a6f6d84c6168aac745504a6cdb4f5c59df0f4f6b59bc82d8a721216ee2b1710d17f2b12142cdf49bda88c915face7ea12a2c536e
- SSDEEP 6144:ngye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:nI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T11FC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory