General
- Target 17. Игры дл� дома дл� �амых маленьких.exe
- Size 1.6MB
- Sample260303-ant7lsey5d
- SHA256 879361ce369ace56a83cd94c526a34fbf7e9a701a03dec8e57ada6164d538843
- MD5 2c8f6e06dc22f00abdee164581fa553d
- SHA1 171fe7391d040bdff32133d3445954a35fe1168e
- SHA512 7f7ef268a4fe02f05b3c5aaf5f10abd9d9f09b0f489d0858bd02d12a40ee4bb6d2acedc8f3cd9794a01ea3a57a9cba4f752cb1bde3b4f56d57c22a0da601da2e
- SSDEEP 24576:LLILY8Xu/3y8UsG2BgYLicwnkNCHdebUKyZURQ1TgjTH:8YrC8UsGuTw0CHdeQKyZURQ1EjTH
- TLSH T16B755AD2F181C4B6E81301B18D3E9F20255ABE79576465DB628E772E4AB32C32477E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
17. Игры дл� дома дл� �амых ма.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
17. Игры дл� дома дл� �амых ма.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
fadok
C2
-
http://wxanalytics.ru/net.exe.config
-
http://wxanalytics.ru/net.exe
Targets
-
- Target 17. Игры дл� дома дл� �амых маленьких.exe
- Size 1.6MB
- SHA256 879361ce369ace56a83cd94c526a34fbf7e9a701a03dec8e57ada6164d538843
- MD5 2c8f6e06dc22f00abdee164581fa553d
- SHA1 171fe7391d040bdff32133d3445954a35fe1168e
- SHA512 7f7ef268a4fe02f05b3c5aaf5f10abd9d9f09b0f489d0858bd02d12a40ee4bb6d2acedc8f3cd9794a01ea3a57a9cba4f752cb1bde3b4f56d57c22a0da601da2e
- SSDEEP 24576:LLILY8Xu/3y8UsG2BgYLicwnkNCHdebUKyZURQ1TgjTH:8YrC8UsGuTw0CHdeQKyZURQ1EjTH
- TLSH T16B755AD2F181C4B6E81301B18D3E9F20255ABE79576465DB628E772E4AB32C32477E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Adds Run key to start application