General
- Target 製品お見積り依頼 27062025.exe
- Size 718KB
- Sample250628-aa84lsbm5x
- SHA256 d2313ef1f45b7418fe9d3df134801f5fdfced3da2e626551ac13a7a37f19648d
- MD5 df0ae3ba9082494f021020c75db6b033
- SHA1 59f49891cb60685741e0fa06eb0c01c46dfe8fd3
- SHA512 d3fad188bb747d5f62ef7755f295c0da8b74d07057948431bb2b7f489f9470bc3acfcf72eae4ed7c2d01c6ba7567c8a4e8fc67add356b34aeafce21a83e6ddf8
- SSDEEP 12288:VjbyNsm5ZT9PqJUoHsRdqREi1pXtkp66ob2UMRt8ugsolifmG5:VjbyNsm5ZT9PoHkZwpO6puJol8
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 製品お見積り依頼 27062025.exe
- Size 718KB
- SHA256 d2313ef1f45b7418fe9d3df134801f5fdfced3da2e626551ac13a7a37f19648d
- MD5 df0ae3ba9082494f021020c75db6b033
- SHA1 59f49891cb60685741e0fa06eb0c01c46dfe8fd3
- SHA512 d3fad188bb747d5f62ef7755f295c0da8b74d07057948431bb2b7f489f9470bc3acfcf72eae4ed7c2d01c6ba7567c8a4e8fc67add356b34aeafce21a83e6ddf8
- SSDEEP 12288:VjbyNsm5ZT9PqJUoHsRdqREi1pXtkp66ob2UMRt8ugsolifmG5:VjbyNsm5ZT9PoHkZwpO6puJol8
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.