General
- Target 420f8934daa481ee8eee1de6a84d04fb5b22d2c0d850abff2aca2222c1b8a884
- Size 2.6MB
- Sample260831-dxt5raee36
- SHA256 420f8934daa481ee8eee1de6a84d04fb5b22d2c0d850abff2aca2222c1b8a884
- MD5 a50fbb2ef7c1029462bde3c4ca971a7d
- SHA1 351f5fc31821a7a2b312fc4d397b92729d2588c5
- SHA512 b323b06088e212aae5d047269d9cfb48587e3b721ea6c075ecbc41c77e55dbfcc2ff9a817cefbc89272f7de0a7b96374f7b4f2030e627a2da9c122dce22057b4
- SSDEEP 49152:rTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:rKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1D1C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
420f8934daa481ee8eee1de6a84d04fb5b22d2c0d850abff2aca2222c1b8a884.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 420f8934daa481ee8eee1de6a84d04fb5b22d2c0d850abff2aca2222c1b8a884
- Size 2.6MB
- SHA256 420f8934daa481ee8eee1de6a84d04fb5b22d2c0d850abff2aca2222c1b8a884
- MD5 a50fbb2ef7c1029462bde3c4ca971a7d
- SHA1 351f5fc31821a7a2b312fc4d397b92729d2588c5
- SHA512 b323b06088e212aae5d047269d9cfb48587e3b721ea6c075ecbc41c77e55dbfcc2ff9a817cefbc89272f7de0a7b96374f7b4f2030e627a2da9c122dce22057b4
- SSDEEP 49152:rTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:rKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1D1C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory