General
- Target aad6bfdf8c432bd5c0283f2ddb584fddb01d335b0b0fb3d62e5fa9256dd2c5e8
- Size 766KB
- Sample261012-y4ghfsey6w
- SHA256 aad6bfdf8c432bd5c0283f2ddb584fddb01d335b0b0fb3d62e5fa9256dd2c5e8
- MD5 4d81d0da95d828fb7bc08e183aba1db1
- SHA1 0e281372fbce49ce9eaf974ec21484343bfa3704
- SHA512 a9aa0a9d0b9d560aaa16ce3f1fc67ba6fa0341177fedf3b9db81b3127570f72997acad86a6cf94ffc5daf3e08ddad910f0ce0a816271d8762044a9b12194c4a2
- SSDEEP 12288:4SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:TvO2xJKRw2kOkx2LFRvcUV
- TLSH T1CDF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
aad6bfdf8c432bd5c0283f2ddb584fddb01d335b0b0fb3d62e5fa9256dd2c5e8.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target aad6bfdf8c432bd5c0283f2ddb584fddb01d335b0b0fb3d62e5fa9256dd2c5e8
- Size 766KB
- SHA256 aad6bfdf8c432bd5c0283f2ddb584fddb01d335b0b0fb3d62e5fa9256dd2c5e8
- MD5 4d81d0da95d828fb7bc08e183aba1db1
- SHA1 0e281372fbce49ce9eaf974ec21484343bfa3704
- SHA512 a9aa0a9d0b9d560aaa16ce3f1fc67ba6fa0341177fedf3b9db81b3127570f72997acad86a6cf94ffc5daf3e08ddad910f0ce0a816271d8762044a9b12194c4a2
- SSDEEP 12288:4SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:TvO2xJKRw2kOkx2LFRvcUV
- TLSH T1CDF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory