General
- Target 86e0267ee6ea6907b2e8521ddf20fa30f50b786b76ca1537bbaea4277e05b1ca
- Size 1.4MB
- Sample260423-nyfc4aby3x
- SHA256 86e0267ee6ea6907b2e8521ddf20fa30f50b786b76ca1537bbaea4277e05b1ca
- MD5 301723753366e50a27f3586731646e3a
- SHA1 64a16b35c53fb9307bd4175e658d2d61c27940d0
- SHA512 570d5cf2548911d8931d631b62b8f70b831cdd98efa31ff2f5ec028d53faf21c1f9b9f08a49f99c3ac22e878c44081b632ae3c67e9ef36a64ebd5b0ba87e2672
- SSDEEP 24576:GH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q3:GcallSllG4ZM7QzMQ
- TLSH T1A0658D13F292C0F1E61C227124FB6339BE749B450A71CAC7EB95DD791C32691AB6720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
86e0267ee6ea6907b2e8521ddf20fa30f50b786b76ca1537bbaea4277e05b1ca.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 86e0267ee6ea6907b2e8521ddf20fa30f50b786b76ca1537bbaea4277e05b1ca
- Size 1.4MB
- SHA256 86e0267ee6ea6907b2e8521ddf20fa30f50b786b76ca1537bbaea4277e05b1ca
- MD5 301723753366e50a27f3586731646e3a
- SHA1 64a16b35c53fb9307bd4175e658d2d61c27940d0
- SHA512 570d5cf2548911d8931d631b62b8f70b831cdd98efa31ff2f5ec028d53faf21c1f9b9f08a49f99c3ac22e878c44081b632ae3c67e9ef36a64ebd5b0ba87e2672
- SSDEEP 24576:GH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q3:GcallSllG4ZM7QzMQ
- TLSH T1A0658D13F292C0F1E61C227124FB6339BE749B450A71CAC7EB95DD791C32691AB6720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects FlyAgent Backdoor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE