General
- Target 21c19b3d8ea139b4f60925207994555d4a15bb7a2864e6d74fe332b08a9e14fa
- Size 560KB
- Sample260906-yyh44adb34
- SHA256 21c19b3d8ea139b4f60925207994555d4a15bb7a2864e6d74fe332b08a9e14fa
- MD5 6af041dd3d1d3a01e5715cb630a6a101
- SHA1 bf7e92f8b7320679a07d7b2e6105c89981addde4
- SHA512 b4fc4ed55f2db2799d762008762249b2e69eb0ad1a5d1caf5e4e124708ca63c94b88e31fb6a5e4be47abce5f3e74fe53a5dd9a3a499e8e37eff6831c6a0015d0
- SSDEEP 6144:IWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:IkCO2zVPX7vf1LKlIsOkxHy
- TLSH T151C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
21c19b3d8ea139b4f60925207994555d4a15bb7a2864e6d74fe332b08a9e14fa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 21c19b3d8ea139b4f60925207994555d4a15bb7a2864e6d74fe332b08a9e14fa
- Size 560KB
- SHA256 21c19b3d8ea139b4f60925207994555d4a15bb7a2864e6d74fe332b08a9e14fa
- MD5 6af041dd3d1d3a01e5715cb630a6a101
- SHA1 bf7e92f8b7320679a07d7b2e6105c89981addde4
- SHA512 b4fc4ed55f2db2799d762008762249b2e69eb0ad1a5d1caf5e4e124708ca63c94b88e31fb6a5e4be47abce5f3e74fe53a5dd9a3a499e8e37eff6831c6a0015d0
- SSDEEP 6144:IWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:IkCO2zVPX7vf1LKlIsOkxHy
- TLSH T151C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory