General
- Target random.exe
- Size 2.1MB
- Sample250514-rfntaszthx
- SHA256 27453ad90a075cedd4fa509bf8e349845dc477f8ce710934c3fdb0014f20144b
- MD5 7e635b2d6a65dd84ae57602b493a968a
- SHA1 55ee5cca2f531aa8042e8f7fa56714e407d2aeae
- SHA512 29edf5f7c802c964b1c2d6d3cc8acdebab4ebc61c7bf54d18dbbf5ad81ecc54d0b92fdcf321548ec75c22f56a8cba05b1f0eb425c64620577b3284ed44c96207
- SSDEEP 49152:IBJ5Tpc8iYMljoCIrtufFEUPtPSfdjh/SXjla:yHTFMlFIQDP4fdj4E
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
random.exe
Resource
win10v2004-20250502-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
random.exe
Resource
win11-20250502-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target random.exe
- Size 2.1MB
- SHA256 27453ad90a075cedd4fa509bf8e349845dc477f8ce710934c3fdb0014f20144b
- MD5 7e635b2d6a65dd84ae57602b493a968a
- SHA1 55ee5cca2f531aa8042e8f7fa56714e407d2aeae
- SHA512 29edf5f7c802c964b1c2d6d3cc8acdebab4ebc61c7bf54d18dbbf5ad81ecc54d0b92fdcf321548ec75c22f56a8cba05b1f0eb425c64620577b3284ed44c96207
- SSDEEP 49152:IBJ5Tpc8iYMljoCIrtufFEUPtPSfdjh/SXjla:yHTFMlFIQDP4fdj4E
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist