General
- Target Install Termius.exe
- Size 174.7MB
- Sample240328-mwvjkaaf91
- SHA256 e66fd24e29c4cd33772fbda049a4efc7b55a0c22959d0d56d0fa77bd34040864
- MD5 47dd221e93e67afaec0c9da2faad8c2d
- SHA1 cc6e78e778a6369022d16e218a8578ec4a7e64bb
- SHA512 30b4246bcdf4c34408fde8b0eb813301135b2e493ea069eda2f20e737bde667574b9c1ff08e2346977e945dc75a1c9e10211418a4d52703485e4906f5db6331a
- SSDEEP 3145728:pnTEziz7qeKOmhoSiH9wwDTD5yCeEQ3Tdpf+5bCGMNMkWxoU5oPb60:BA67qJhiSNwHtyZEQ33vDfQA60
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Install Termius.exe
Resource
win10v2004-20240226-en
17 signatures
600 seconds
Malware Config
Targets
-
- Target Install Termius.exe
- Size 174.7MB
- SHA256 e66fd24e29c4cd33772fbda049a4efc7b55a0c22959d0d56d0fa77bd34040864
- MD5 47dd221e93e67afaec0c9da2faad8c2d
- SHA1 cc6e78e778a6369022d16e218a8578ec4a7e64bb
- SHA512 30b4246bcdf4c34408fde8b0eb813301135b2e493ea069eda2f20e737bde667574b9c1ff08e2346977e945dc75a1c9e10211418a4d52703485e4906f5db6331a
- SSDEEP 3145728:pnTEziz7qeKOmhoSiH9wwDTD5yCeEQ3Tdpf+5bCGMNMkWxoU5oPb60:BA67qJhiSNwHtyZEQ33vDfQA60
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.