General
- Target 4a95e3dfb2b23d49021482497ea50546a370bc596f6546bc2838c1d427dab549
- Size 560KB
- Sample260916-lhgvwaybme
- SHA256 4a95e3dfb2b23d49021482497ea50546a370bc596f6546bc2838c1d427dab549
- MD5 572813bf63661264c22ca7c00309e76a
- SHA1 6c332f4c05724aed2895842d282f9cc9d71e7704
- SHA512 aa1c6a0d8f765d374ed6892785bdd517e6cdebe674a9890457c0b86686461d843e9e4068e54c8f92fbf25b36074a9e9d534831cf3f00415d295a038493bc1625
- SSDEEP 6144:SWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:SkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1B8C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4a95e3dfb2b23d49021482497ea50546a370bc596f6546bc2838c1d427dab549.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4a95e3dfb2b23d49021482497ea50546a370bc596f6546bc2838c1d427dab549
- Size 560KB
- SHA256 4a95e3dfb2b23d49021482497ea50546a370bc596f6546bc2838c1d427dab549
- MD5 572813bf63661264c22ca7c00309e76a
- SHA1 6c332f4c05724aed2895842d282f9cc9d71e7704
- SHA512 aa1c6a0d8f765d374ed6892785bdd517e6cdebe674a9890457c0b86686461d843e9e4068e54c8f92fbf25b36074a9e9d534831cf3f00415d295a038493bc1625
- SSDEEP 6144:SWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:SkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1B8C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory