General
- Target 1.exe
- Size 27.6MB
- Sample250313-yml2ls1xcs
- SHA256 585ab6c1cdaa65c9d08decf4e1ab1cf9327f00e18d13e85e338268ccc3587aab
- MD5 8e6e0c5a5847177f1105a67f75a2d05e
- SHA1 b47636a46a964595ef771df32f215693396af7ad
- SHA512 9ddb9dcec05c4f0a49fdb581882fd88addbfc0710da257cdd5a6759ce6c89e30beaf978c266cd37d8aa1c651f33b8b62d01ddbfeb15acb1a148ee1185ea26d5d
- SSDEEP 786432:7Fxb8yuOgTwJszi6kPgsZF2cpZd4yQjluNtQ+2drTgYee:7Fxb8yuOg0WRkBNpkxEU+2NgYee
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20250207-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20250217-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 1.exe
- Size 27.6MB
- SHA256 585ab6c1cdaa65c9d08decf4e1ab1cf9327f00e18d13e85e338268ccc3587aab
- MD5 8e6e0c5a5847177f1105a67f75a2d05e
- SHA1 b47636a46a964595ef771df32f215693396af7ad
- SHA512 9ddb9dcec05c4f0a49fdb581882fd88addbfc0710da257cdd5a6759ce6c89e30beaf978c266cd37d8aa1c651f33b8b62d01ddbfeb15acb1a148ee1185ea26d5d
- SSDEEP 786432:7Fxb8yuOgTwJszi6kPgsZF2cpZd4yQjluNtQ+2drTgYee:7Fxb8yuOg0WRkBNpkxEU+2NgYee
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory