General
- Target 684bce1dd6ff52504ac9d85f4db1ae750d1ce3dbe8c211211d6fe25112a061cd
- Size 1024KB
- Sample260919-2ql3kat18k
- SHA256 684bce1dd6ff52504ac9d85f4db1ae750d1ce3dbe8c211211d6fe25112a061cd
- MD5 18e1b6dd6aa8ff4cdd26667b7dd9558b
- SHA1 42c28f36a1a71eae25f02fbad3a05e6fec678052
- SHA512 f96310d18f88070acc732068d4c447b70c2ce3b3a63f047406227c4ac7b411b7a78a46cbcf9ff78304839cbc97f633988ef413a30c5b0ac5195aa4a7395c9b7b
- SSDEEP 12288:0SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidH:HvO2xJKRw2kOkx2LFRvcU6UQOJdH
- TLSH T194256C31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
684bce1dd6ff52504ac9d85f4db1ae750d1ce3dbe8c211211d6fe25112a061cd.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 684bce1dd6ff52504ac9d85f4db1ae750d1ce3dbe8c211211d6fe25112a061cd
- Size 1024KB
- SHA256 684bce1dd6ff52504ac9d85f4db1ae750d1ce3dbe8c211211d6fe25112a061cd
- MD5 18e1b6dd6aa8ff4cdd26667b7dd9558b
- SHA1 42c28f36a1a71eae25f02fbad3a05e6fec678052
- SHA512 f96310d18f88070acc732068d4c447b70c2ce3b3a63f047406227c4ac7b411b7a78a46cbcf9ff78304839cbc97f633988ef413a30c5b0ac5195aa4a7395c9b7b
- SSDEEP 12288:0SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidH:HvO2xJKRw2kOkx2LFRvcU6UQOJdH
- TLSH T194256C31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory