General
- Target 358415cd6b6f54827deea8e25dc35594001b452b88ddeef53aaaed967e780bdc.exe
- Size 1.1MB
- Sample260415-mgd82aex4x
- SHA256 358415cd6b6f54827deea8e25dc35594001b452b88ddeef53aaaed967e780bdc
- MD5 6fbc3478a37ee4382f17a867f14ecdd7
- SHA1 b63dbe2d7cbceeea454258fc0deaacbe8ad123c9
- SHA512 aabe2e1c5a2526c54a7f79647658b97cff0ad78b34bd6be10c39c152ced5e937121350437f52dbedf6e88c33250afc42bc64ecc6c226738d27138cd54a923ed9
- SSDEEP 24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QI:acallSllG4ZM7QzMB
- TLSH T17C458D13F292C0F1E61C227124FB6739BE749B450A71CAC7EB94DD791C32691AB6720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
358415cd6b6f54827deea8e25dc35594001b452b88ddeef53aaaed967e780bdc.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 358415cd6b6f54827deea8e25dc35594001b452b88ddeef53aaaed967e780bdc.exe
- Size 1.1MB
- SHA256 358415cd6b6f54827deea8e25dc35594001b452b88ddeef53aaaed967e780bdc
- MD5 6fbc3478a37ee4382f17a867f14ecdd7
- SHA1 b63dbe2d7cbceeea454258fc0deaacbe8ad123c9
- SHA512 aabe2e1c5a2526c54a7f79647658b97cff0ad78b34bd6be10c39c152ced5e937121350437f52dbedf6e88c33250afc42bc64ecc6c226738d27138cd54a923ed9
- SSDEEP 24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QI:acallSllG4ZM7QzMB
- TLSH T17C458D13F292C0F1E61C227124FB6739BE749B450A71CAC7EB94DD791C32691AB6720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects FlyAgent Backdoor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE