General
- Target f6347f8f58227ade0193fb9c596006acc503ef299a5db5844e2a87fc16a8b36a
- Size 2.6MB
- Sample260831-dbq6zatera
- SHA256 f6347f8f58227ade0193fb9c596006acc503ef299a5db5844e2a87fc16a8b36a
- MD5 ce841cd1f9ec9995cebb5a7b0485a159
- SHA1 74811370c22d105ad217d0dcd5061395cafa2e04
- SHA512 a627627b331e58babbfd6f24d2c1028ec6946c3b54264834e63ea3f91be04d108be5b8b01bf7dc284cfa6a46c6a0d0092c6320641bfcec5d030a02d51add5da4
- SSDEEP 49152:jTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:jKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T182C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f6347f8f58227ade0193fb9c596006acc503ef299a5db5844e2a87fc16a8b36a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f6347f8f58227ade0193fb9c596006acc503ef299a5db5844e2a87fc16a8b36a
- Size 2.6MB
- SHA256 f6347f8f58227ade0193fb9c596006acc503ef299a5db5844e2a87fc16a8b36a
- MD5 ce841cd1f9ec9995cebb5a7b0485a159
- SHA1 74811370c22d105ad217d0dcd5061395cafa2e04
- SHA512 a627627b331e58babbfd6f24d2c1028ec6946c3b54264834e63ea3f91be04d108be5b8b01bf7dc284cfa6a46c6a0d0092c6320641bfcec5d030a02d51add5da4
- SSDEEP 49152:jTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:jKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T182C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory