General
- Target 5a96bfd026939909841713f2ab5667ebb22a0c98c7f56c66faa36ca2bcf78ac7
- Size 525KB
- Sample261017-ssaymsff29
- SHA256 5a96bfd026939909841713f2ab5667ebb22a0c98c7f56c66faa36ca2bcf78ac7
- MD5 cab786339b14046ccb72818ac9d38aba
- SHA1 9664b5aa19dcd4c604439a6276fc98c39804ecf0
- SHA512 9b66e36e8878f2a333bb2707f2552e6d0e51c52b1ebb4dff47cb76d4f10dabbbd089b057559cdb62a34122639cd8e8d0ca6263bf7f274c1693c907d09ff98eae
- SSDEEP 6144:jcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:jSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1B9B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5a96bfd026939909841713f2ab5667ebb22a0c98c7f56c66faa36ca2bcf78ac7.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 5a96bfd026939909841713f2ab5667ebb22a0c98c7f56c66faa36ca2bcf78ac7
- Size 525KB
- SHA256 5a96bfd026939909841713f2ab5667ebb22a0c98c7f56c66faa36ca2bcf78ac7
- MD5 cab786339b14046ccb72818ac9d38aba
- SHA1 9664b5aa19dcd4c604439a6276fc98c39804ecf0
- SHA512 9b66e36e8878f2a333bb2707f2552e6d0e51c52b1ebb4dff47cb76d4f10dabbbd089b057559cdb62a34122639cd8e8d0ca6263bf7f274c1693c907d09ff98eae
- SSDEEP 6144:jcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:jSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1B9B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory