General
- Target 768540e333fb1f2da65a2dcb87b6183cc980725ba6d449b34cc9f3a918e0916f.exe
- Size 1.1MB
- Sample260416-lr1pcaft2y
- SHA256 768540e333fb1f2da65a2dcb87b6183cc980725ba6d449b34cc9f3a918e0916f
- MD5 8fd685d27ff98941a66c9182ef126072
- SHA1 2ee9f2e6ea5004096634e91a2f9ede67b64959ff
- SHA512 5e053c46db1d5c464d8b3d5097c335652098039885f8448788bd1995fde9f1d5d5fd7d53e5381bace5af4144c4ed59053ab12cd2a2c8fb0db4f4a31a1c6c6df7
- SSDEEP 24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QF:acallSllG4ZM7QzMs
- TLSH T1AB458D13F292C0F1E61C227124FB6739BE749B450A71CAC7EB94DD791C32691AB6720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
768540e333fb1f2da65a2dcb87b6183cc980725ba6d449b34cc9f3a918e0916f.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 768540e333fb1f2da65a2dcb87b6183cc980725ba6d449b34cc9f3a918e0916f.exe
- Size 1.1MB
- SHA256 768540e333fb1f2da65a2dcb87b6183cc980725ba6d449b34cc9f3a918e0916f
- MD5 8fd685d27ff98941a66c9182ef126072
- SHA1 2ee9f2e6ea5004096634e91a2f9ede67b64959ff
- SHA512 5e053c46db1d5c464d8b3d5097c335652098039885f8448788bd1995fde9f1d5d5fd7d53e5381bace5af4144c4ed59053ab12cd2a2c8fb0db4f4a31a1c6c6df7
- SSDEEP 24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QF:acallSllG4ZM7QzMs
- TLSH T1AB458D13F292C0F1E61C227124FB6739BE749B450A71CAC7EB94DD791C32691AB6720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects FlyAgent Backdoor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE