General
- Target 6e94bd3843476810f853a28c28c6fef195aa6f6fd3a1f8f8840e001293d0cca4
- Size 1.1MB
- Sample261002-jdf2nsw16p
- SHA256 6e94bd3843476810f853a28c28c6fef195aa6f6fd3a1f8f8840e001293d0cca4
- MD5 ac207f2d523e1e3d1bdf103e003b1ad3
- SHA1 f3a143dfe870bbc56fbaf22c20b21dd8de5ab302
- SHA512 27ccef055f194cd7e1271e088312188c0fbb6d3f1cabaeecc2690ff7751aa7533568ef83e738f121b3b140f6acf3043ed90a0bae00df3bdc21b611721082b5b6
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:ivO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T196357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6e94bd3843476810f853a28c28c6fef195aa6f6fd3a1f8f8840e001293d0cca4.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 6e94bd3843476810f853a28c28c6fef195aa6f6fd3a1f8f8840e001293d0cca4
- Size 1.1MB
- SHA256 6e94bd3843476810f853a28c28c6fef195aa6f6fd3a1f8f8840e001293d0cca4
- MD5 ac207f2d523e1e3d1bdf103e003b1ad3
- SHA1 f3a143dfe870bbc56fbaf22c20b21dd8de5ab302
- SHA512 27ccef055f194cd7e1271e088312188c0fbb6d3f1cabaeecc2690ff7751aa7533568ef83e738f121b3b140f6acf3043ed90a0bae00df3bdc21b611721082b5b6
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:ivO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T196357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory