General
- Target 1b656b11bb3dc4937c580be7ae472075cde2e4d3e95f9811cb4afbeb60e629ad
- Size 560KB
- Sample261002-x95a2age92
- SHA256 1b656b11bb3dc4937c580be7ae472075cde2e4d3e95f9811cb4afbeb60e629ad
- MD5 cb0b08e883b01b36e2fe54a6cad88e4c
- SHA1 1a43d46d84e068a3fa5a16900282e425ce377cbb
- SHA512 ecec1ec4a421979c65a52df86385a5e8eff989acf3323d5baaadad2b7368261ff45463e6d40a7a0d2005c3f61fc9d331ec211aa5e9816d3ac8afe8cda2647349
- SSDEEP 12288:EftONCx61vvGEYQFNEhyQU/lLi2IsOkxHy:GtONCTU/lmaOkxS
- TLSH T19AC48E29B6D0C076C4B79574C4A186BAFAB17432372089CFA39407571F637D2BA3974E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1b656b11bb3dc4937c580be7ae472075cde2e4d3e95f9811cb4afbeb60e629ad.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1b656b11bb3dc4937c580be7ae472075cde2e4d3e95f9811cb4afbeb60e629ad
- Size 560KB
- SHA256 1b656b11bb3dc4937c580be7ae472075cde2e4d3e95f9811cb4afbeb60e629ad
- MD5 cb0b08e883b01b36e2fe54a6cad88e4c
- SHA1 1a43d46d84e068a3fa5a16900282e425ce377cbb
- SHA512 ecec1ec4a421979c65a52df86385a5e8eff989acf3323d5baaadad2b7368261ff45463e6d40a7a0d2005c3f61fc9d331ec211aa5e9816d3ac8afe8cda2647349
- SSDEEP 12288:EftONCx61vvGEYQFNEhyQU/lLi2IsOkxHy:GtONCTU/lmaOkxS
- TLSH T19AC48E29B6D0C076C4B79574C4A186BAFAB17432372089CFA39407571F637D2BA3974E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory