General
- Target 9f096459409d6b90f19b855d49ea7fb36178610e3934ac049d5e7ae88025bd86
- Size 1.7MB
- Sample260831-ktsabaydmc
- SHA256 9f096459409d6b90f19b855d49ea7fb36178610e3934ac049d5e7ae88025bd86
- MD5 d9da0b76c601234b7e5626167312de7f
- SHA1 ad5deda9b03912c65dad9047ec72dbc5e92df92c
- SHA512 d73af8013a930fd2a6a0c98c170b09622de5d766728b482b442362e0976bc0c9b34d340c83b26df7847f818272180987c7da2fb62d4a324b37ae38fb8d28488d
- SSDEEP 24576:dvO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:dHHKX2WQt5QZuTtS0rQMYOQ+q8CE0I
- TLSH T16D859E21B791C036D4AB01758AB98BAEA578BD31072551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9f096459409d6b90f19b855d49ea7fb36178610e3934ac049d5e7ae88025bd86.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9f096459409d6b90f19b855d49ea7fb36178610e3934ac049d5e7ae88025bd86
- Size 1.7MB
- SHA256 9f096459409d6b90f19b855d49ea7fb36178610e3934ac049d5e7ae88025bd86
- MD5 d9da0b76c601234b7e5626167312de7f
- SHA1 ad5deda9b03912c65dad9047ec72dbc5e92df92c
- SHA512 d73af8013a930fd2a6a0c98c170b09622de5d766728b482b442362e0976bc0c9b34d340c83b26df7847f818272180987c7da2fb62d4a324b37ae38fb8d28488d
- SSDEEP 24576:dvO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbA0I:dHHKX2WQt5QZuTtS0rQMYOQ+q8CE0I
- TLSH T16D859E21B791C036D4AB01758AB98BAEA578BD31072551C7B3C47A7E5FB12D2AE3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory