General
- Target SecuriteInfo.com.Win32.MalwareX-gen.31929.22299.exe
- Size 841KB
- Sample250417-tm4jfawqs3
- SHA256 fa1cfaafe2029ee02035b899a389916cb02bac4270d3f438be0a5013f170e420
- MD5 a00b49b3d6e2be7abc374a92b5413ce2
- SHA1 dae48cc35d64ef75e2955feff43510be8cecc46b
- SHA512 02430c252addba3095821927aeb3c85e9f313777bae581215d9846b5333fc63de0daf6a6fd4f9c279632f7987744c2375cd3f5215c49bb34d62d23ea9268c63c
- SSDEEP 12288:oxrgCRxNen6DOcYxjhez5VlSyrNDsRCg8x+UeVR4QBsQqvIGAzXliDF8HK:WW6yb1IzpSyrFsYg8qpOQqgGA
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.MalwareX-gen.31929.22299.exe
Resource
win10v2004-20250410-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.MalwareX-gen.31929.22299.exe
- Size 841KB
- SHA256 fa1cfaafe2029ee02035b899a389916cb02bac4270d3f438be0a5013f170e420
- MD5 a00b49b3d6e2be7abc374a92b5413ce2
- SHA1 dae48cc35d64ef75e2955feff43510be8cecc46b
- SHA512 02430c252addba3095821927aeb3c85e9f313777bae581215d9846b5333fc63de0daf6a6fd4f9c279632f7987744c2375cd3f5215c49bb34d62d23ea9268c63c
- SSDEEP 12288:oxrgCRxNen6DOcYxjhez5VlSyrNDsRCg8x+UeVR4QBsQqvIGAzXliDF8HK:WW6yb1IzpSyrFsYg8qpOQqgGA
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext