General
- Target 15082025_YENİ ... ÖDEMESİ 13.08.2024_dekont.exe
- Size 756KB
- Sample250815-jkd6navls9
- SHA256 88b838cc854132e243dc0e2d3ca34f49f0de3c96d5b2bf15b0901bed270702c1
- MD5 9ae99a087a085b2306f70f7729aad4a5
- SHA1 02bdf5abc7e195def0e4dd90c522c319a3e743ac
- SHA512 63b0ea9662aaa4ed97b3ba78dee276a6e8aebb48cbf796e93805a43ee65e3c5bccbc9944713e2db037e2b5436a518a1a68e5327f46fa8a9dac9206bee214cf43
- SSDEEP 12288:cApcszAM3gD3lW9cZCCxpHVd7Arv8joe6pjgAQqMcUqVKL0PjbrwQCLJDpewqA:Xm/D3JCCxp11Arv8sVoetVKsjbrwf1Iw
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
15082025_YENİ ... ÖDEMESİ 13.08.2024_dekont.exe
Resource
win10v2004-20250619-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 15082025_YENİ ... ÖDEMESİ 13.08.2024_dekont.exe
- Size 756KB
- SHA256 88b838cc854132e243dc0e2d3ca34f49f0de3c96d5b2bf15b0901bed270702c1
- MD5 9ae99a087a085b2306f70f7729aad4a5
- SHA1 02bdf5abc7e195def0e4dd90c522c319a3e743ac
- SHA512 63b0ea9662aaa4ed97b3ba78dee276a6e8aebb48cbf796e93805a43ee65e3c5bccbc9944713e2db037e2b5436a518a1a68e5327f46fa8a9dac9206bee214cf43
- SSDEEP 12288:cApcszAM3gD3lW9cZCCxpHVd7Arv8joe6pjgAQqMcUqVKL0PjbrwQCLJDpewqA:Xm/D3JCCxp11Arv8sVoetVKsjbrwf1Iw
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.