General
- Target 1.exe
- Size 1.6MB
- Sample251221-malpjack7z
- SHA256 fb24953507949ebdec42728c7657a77a797279ed2a4672a339e0d25dd63a2620
- MD5 8025a54d7b7756a4ab7cd1bbe322829e
- SHA1 1af7745f9b8e101175c02e6a342d25df8b061e86
- SHA512 8dc1351d14117694edf28ab4ee5442ea61513e40ba368c5c2ea094b0015d2c43e747af16643e8e941e0a5fdb76d07db4cb60ced642d113fc9781fead9a29bf63
- SSDEEP 24576:LLILY8Xu/3y8UsG2BgYLicwnk4DCHdebUKyZURQ1TgjTn:8YrC8UsGuTw1DCHdeQKyZURQ1EjTn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
1.exe
Resource
win10v2004-20251223-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win11-20251223-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
fadok
C2
-
http://wxanalytics.ru/net.exe.config
-
http://wxanalytics.ru/net.exe
Targets
-
- Target 1.exe
- Size 1.6MB
- SHA256 fb24953507949ebdec42728c7657a77a797279ed2a4672a339e0d25dd63a2620
- MD5 8025a54d7b7756a4ab7cd1bbe322829e
- SHA1 1af7745f9b8e101175c02e6a342d25df8b061e86
- SHA512 8dc1351d14117694edf28ab4ee5442ea61513e40ba368c5c2ea094b0015d2c43e747af16643e8e941e0a5fdb76d07db4cb60ced642d113fc9781fead9a29bf63
- SSDEEP 24576:LLILY8Xu/3y8UsG2BgYLicwnk4DCHdebUKyZURQ1TgjTn:8YrC8UsGuTw1DCHdeQKyZURQ1EjTn
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application