General
- Target 68e50907ed6e8832686e108c74baacb5166fd9a6950e0466871513847cf8ee2c
- Size 560KB
- Sample260930-yvm9msvakf
- SHA256 68e50907ed6e8832686e108c74baacb5166fd9a6950e0466871513847cf8ee2c
- MD5 a2e1eca7ddbc1d9d2b3d9532bddc7d20
- SHA1 762b78a8d9e7f34db5e1bc27e21def9d66282b20
- SHA512 7cb2ecf0b6e00666de60d671422450f2af368935968125c9ff0873eada8578b182fe49a75fb70270be0b7a75156466899e20115afa940868fcdae887ddde7185
- SSDEEP 6144:jUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:jYsVOdhElvkCgvDLe4usOkxHy
- TLSH T177C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
68e50907ed6e8832686e108c74baacb5166fd9a6950e0466871513847cf8ee2c.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 68e50907ed6e8832686e108c74baacb5166fd9a6950e0466871513847cf8ee2c
- Size 560KB
- SHA256 68e50907ed6e8832686e108c74baacb5166fd9a6950e0466871513847cf8ee2c
- MD5 a2e1eca7ddbc1d9d2b3d9532bddc7d20
- SHA1 762b78a8d9e7f34db5e1bc27e21def9d66282b20
- SHA512 7cb2ecf0b6e00666de60d671422450f2af368935968125c9ff0873eada8578b182fe49a75fb70270be0b7a75156466899e20115afa940868fcdae887ddde7185
- SSDEEP 6144:jUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:jYsVOdhElvkCgvDLe4usOkxHy
- TLSH T177C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory