General
- Target cca7f90be6c9b3af2e0b23966861426a5fa62c6bfb8beca9a8ac6c5b7db3f8ca
- Size 2.9MB
- Sample261001-zh6e5aszhy
- SHA256 cca7f90be6c9b3af2e0b23966861426a5fa62c6bfb8beca9a8ac6c5b7db3f8ca
- MD5 0211b4a8d5946a29690e3a79d63d76ea
- SHA1 fb49466bcf18f4c83db65a2e3bf8e2e93790d018
- SHA512 9e23589103312448bc7a75ff5b8e6b2b09e605094d623c072e806ee8143c8896ec0474d90d67cf688e9485a0350699ee95c3902dba6ffbf2cb309a3d9c2cc479
- SSDEEP 49152:rHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:rnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1A0D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cca7f90be6c9b3af2e0b23966861426a5fa62c6bfb8beca9a8ac6c5b7db3f8ca.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target cca7f90be6c9b3af2e0b23966861426a5fa62c6bfb8beca9a8ac6c5b7db3f8ca
- Size 2.9MB
- SHA256 cca7f90be6c9b3af2e0b23966861426a5fa62c6bfb8beca9a8ac6c5b7db3f8ca
- MD5 0211b4a8d5946a29690e3a79d63d76ea
- SHA1 fb49466bcf18f4c83db65a2e3bf8e2e93790d018
- SHA512 9e23589103312448bc7a75ff5b8e6b2b09e605094d623c072e806ee8143c8896ec0474d90d67cf688e9485a0350699ee95c3902dba6ffbf2cb309a3d9c2cc479
- SSDEEP 49152:rHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:rnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1A0D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory