General
- Target f08faef58a567017450c04a06d51c29e8eb972f2967d1dfc4df251cffa65b70c
- Size 1.4MB
- Sample260827-ev281sxwev
- SHA256 f08faef58a567017450c04a06d51c29e8eb972f2967d1dfc4df251cffa65b70c
- MD5 3e20c6e380dedf99ed17e6f9df418eae
- SHA1 90ed8ef369f66c53619ff47349aa7e063b460a8f
- SHA512 4f3c8c0ec6b1a870a8b23d44846ee984c01556b2f82751ba9cd41f2db31a1cf194dae2279fb1fac22ad704853df69534a0ad03eb01345f439ef826739b93d097
- SSDEEP 24576:vjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:vTGkQy5QZuTtS0rQMYOQ+q8CE0I
- TLSH T18965AE21B341C036D59A01758ABE4BAE957CBD314B2551C7B3C87E7E6FB12D2AA3130B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f08faef58a567017450c04a06d51c29e8eb972f2967d1dfc4df251cffa65b70c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f08faef58a567017450c04a06d51c29e8eb972f2967d1dfc4df251cffa65b70c
- Size 1.4MB
- SHA256 f08faef58a567017450c04a06d51c29e8eb972f2967d1dfc4df251cffa65b70c
- MD5 3e20c6e380dedf99ed17e6f9df418eae
- SHA1 90ed8ef369f66c53619ff47349aa7e063b460a8f
- SHA512 4f3c8c0ec6b1a870a8b23d44846ee984c01556b2f82751ba9cd41f2db31a1cf194dae2279fb1fac22ad704853df69534a0ad03eb01345f439ef826739b93d097
- SSDEEP 24576:vjHPOSOkx2LFscUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:vTGkQy5QZuTtS0rQMYOQ+q8CE0I
- TLSH T18965AE21B341C036D59A01758ABE4BAE957CBD314B2551C7B3C87E7E6FB12D2AA3130B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory