General
- Target 9d9ccf8b9d7a906b4675eab1fb70acf080d60840649c0b786a7d385a9e391829
- Size 640KB
- Sample260831-lnle9azajd
- SHA256 9d9ccf8b9d7a906b4675eab1fb70acf080d60840649c0b786a7d385a9e391829
- MD5 636a6323c9045396a9cdbf6e4792ed6d
- SHA1 ee33383941a9cad0c6676dd24579f4d37742ded8
- SHA512 115f5ead1f800879a121176e2a0d92c22858fec73674dcc5a4ca710e14fced09005f0a52173e08106b5c9660504def3380cb82121dd059a597a5708a916c7b76
- SSDEEP 6144:scTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:sSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1B9D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9d9ccf8b9d7a906b4675eab1fb70acf080d60840649c0b786a7d385a9e391829.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9d9ccf8b9d7a906b4675eab1fb70acf080d60840649c0b786a7d385a9e391829
- Size 640KB
- SHA256 9d9ccf8b9d7a906b4675eab1fb70acf080d60840649c0b786a7d385a9e391829
- MD5 636a6323c9045396a9cdbf6e4792ed6d
- SHA1 ee33383941a9cad0c6676dd24579f4d37742ded8
- SHA512 115f5ead1f800879a121176e2a0d92c22858fec73674dcc5a4ca710e14fced09005f0a52173e08106b5c9660504def3380cb82121dd059a597a5708a916c7b76
- SSDEEP 6144:scTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:sSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1B9D45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory