General
- Target ff537e5ac551761a1638e35f1fa4828613c74a4630dda7e9822eaa2c82082e80
- Size 560KB
- Sample260930-x97fdsy13p
- SHA256 ff537e5ac551761a1638e35f1fa4828613c74a4630dda7e9822eaa2c82082e80
- MD5 7d8d6bf67539a2d8a7ce3d50738cee73
- SHA1 7817db390cc79566a1657ffbc124293b003fc5fa
- SHA512 a4b4fd35f6585b3fb3d7fe639f1ac1cfc2e3ae86ca8e51df31b1da504bfb21ddc0509c15ca3876936c3547839c069f63c79e882a53f8eaa3d16e7de454347f72
- SSDEEP 12288:rftONCx61vvGEYQFNEhyQU/lLi2IsOkxHy:TtONCTU/lmaOkxS
- TLSH T14EC48E29B6E0C076C4B79574C4A186BAFAB17432372089CFA39407571F637D2BA3974E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ff537e5ac551761a1638e35f1fa4828613c74a4630dda7e9822eaa2c82082e80.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ff537e5ac551761a1638e35f1fa4828613c74a4630dda7e9822eaa2c82082e80
- Size 560KB
- SHA256 ff537e5ac551761a1638e35f1fa4828613c74a4630dda7e9822eaa2c82082e80
- MD5 7d8d6bf67539a2d8a7ce3d50738cee73
- SHA1 7817db390cc79566a1657ffbc124293b003fc5fa
- SHA512 a4b4fd35f6585b3fb3d7fe639f1ac1cfc2e3ae86ca8e51df31b1da504bfb21ddc0509c15ca3876936c3547839c069f63c79e882a53f8eaa3d16e7de454347f72
- SSDEEP 12288:rftONCx61vvGEYQFNEhyQU/lLi2IsOkxHy:TtONCTU/lmaOkxS
- TLSH T14EC48E29B6E0C076C4B79574C4A186BAFAB17432372089CFA39407571F637D2BA3974E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory