General
- Target 9be5d8be6c42b4bd21ada8bc766d9bcf1b1d5d267e8e365f80a05fe18272e9e5
- Size 18KB
- Sample260313-vjnt9ad18z
- SHA256 9be5d8be6c42b4bd21ada8bc766d9bcf1b1d5d267e8e365f80a05fe18272e9e5
- MD5 cd7f05d80b2a59f8550d5456742c888e
- SHA1 19f6a76fe91445fb91f935ebc1eb35f2b834afd6
- SHA512 13b88107a92b25aaee13e91ee358497126a59e27f61e5d3a9624cfce40c1ee49da0f0b774c77b64d4397dc6526c677122e81e96ca746c4e8ebf8e34111d5c4f6
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimebgrJWlkG7:uTQWckBeEd6ml1pcg7F3GiSrI8gZ
- TLSH T1B58284345FD61EB3E3B7D7F285F7C2C6A875B03B66039A2E90451F492823A019D90E9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
9be5d8be6c42b4bd21ada8bc766d9bcf1b1d5d267e8e365f80a05fe18272e9e5.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
9be5d8be6c42b4bd21ada8bc766d9bcf1b1d5d267e8e365f80a05fe18272e9e5.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9be5d8be6c42b4bd21ada8bc766d9bcf1b1d5d267e8e365f80a05fe18272e9e5
- Size 18KB
- SHA256 9be5d8be6c42b4bd21ada8bc766d9bcf1b1d5d267e8e365f80a05fe18272e9e5
- MD5 cd7f05d80b2a59f8550d5456742c888e
- SHA1 19f6a76fe91445fb91f935ebc1eb35f2b834afd6
- SHA512 13b88107a92b25aaee13e91ee358497126a59e27f61e5d3a9624cfce40c1ee49da0f0b774c77b64d4397dc6526c677122e81e96ca746c4e8ebf8e34111d5c4f6
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGimebgrJWlkG7:uTQWckBeEd6ml1pcg7F3GiSrI8gZ
- TLSH T1B58284345FD61EB3E3B7D7F285F7C2C6A875B03B66039A2E90451F492823A019D90E9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Waski payload
Waski family
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE