General
- Target 4928d4872f32312c93fa321ff55464ac3bd62062ca3a9644aed2d4b726dffb87
- Size 1.7MB
- Sample260916-lhjdpswvft
- SHA256 4928d4872f32312c93fa321ff55464ac3bd62062ca3a9644aed2d4b726dffb87
- MD5 ffda01294df5376f2d06afb9bbdf8f6f
- SHA1 313d9a059dcf77bc4886948429e05194840aab32
- SHA512 20bc0f9d219454f6da9c2f6457c423622d8ea8465de16cf051126d2e497a48d0b9dec9373fd38156d814567caab6c9a16644ee0bcd971cc1e822aa35b3c7d840
- SSDEEP 24576:pvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:pHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T116858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4928d4872f32312c93fa321ff55464ac3bd62062ca3a9644aed2d4b726dffb87.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4928d4872f32312c93fa321ff55464ac3bd62062ca3a9644aed2d4b726dffb87
- Size 1.7MB
- SHA256 4928d4872f32312c93fa321ff55464ac3bd62062ca3a9644aed2d4b726dffb87
- MD5 ffda01294df5376f2d06afb9bbdf8f6f
- SHA1 313d9a059dcf77bc4886948429e05194840aab32
- SHA512 20bc0f9d219454f6da9c2f6457c423622d8ea8465de16cf051126d2e497a48d0b9dec9373fd38156d814567caab6c9a16644ee0bcd971cc1e822aa35b3c7d840
- SSDEEP 24576:pvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:pHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T116858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory