General
- Target d21e52aa2fdbb78e68e252e91fe5b0f850c9c917981bf6938bb522126c6477d3
- Size 525KB
- Sample261017-e8d4cahw2n
- SHA256 d21e52aa2fdbb78e68e252e91fe5b0f850c9c917981bf6938bb522126c6477d3
- MD5 3d55617c32be848d947e20809d6b4470
- SHA1 6a0a841d5c603ffacce6461eb0324214b7cfd4cc
- SHA512 b56a1ed45eb82fe7a714cae47e3941d519d3e64396349ab872dedbc7c776b54cb38410a1c1410dbe99ded6d479a0c27ac60c17a9172c28b1004eaf2848dc5a77
- SSDEEP 6144:gcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:gSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T18FB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d21e52aa2fdbb78e68e252e91fe5b0f850c9c917981bf6938bb522126c6477d3.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target d21e52aa2fdbb78e68e252e91fe5b0f850c9c917981bf6938bb522126c6477d3
- Size 525KB
- SHA256 d21e52aa2fdbb78e68e252e91fe5b0f850c9c917981bf6938bb522126c6477d3
- MD5 3d55617c32be848d947e20809d6b4470
- SHA1 6a0a841d5c603ffacce6461eb0324214b7cfd4cc
- SHA512 b56a1ed45eb82fe7a714cae47e3941d519d3e64396349ab872dedbc7c776b54cb38410a1c1410dbe99ded6d479a0c27ac60c17a9172c28b1004eaf2848dc5a77
- SSDEEP 6144:gcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:gSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T18FB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory