General
- Target a5be46aea10e08bfaa96d4e307dd398ce10beb6c3579eedea568979875b4c615.exe
- Size 1.3MB
- Sample260424-hsf5jsas71
- SHA256 a5be46aea10e08bfaa96d4e307dd398ce10beb6c3579eedea568979875b4c615
- MD5 7e65dd82f7f9a09e93bbcd28f79c6f69
- SHA1 7ab6b44c32fd3513445639c0a1e0a26834895b78
- SHA512 8e032f033b724e06a6bcc8d3ea9cd1e0a2097dcfc620a406880b095d9d5bf9e3796803ef8eeb4aa39f82158b17c561e9dbf98553b749568166a6d7e48c176cfa
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5X:WZaClSFlG4ZM7QlV1
- TLSH T1C7557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a5be46aea10e08bfaa96d4e307dd398ce10beb6c3579eedea568979875b4c615.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target a5be46aea10e08bfaa96d4e307dd398ce10beb6c3579eedea568979875b4c615.exe
- Size 1.3MB
- SHA256 a5be46aea10e08bfaa96d4e307dd398ce10beb6c3579eedea568979875b4c615
- MD5 7e65dd82f7f9a09e93bbcd28f79c6f69
- SHA1 7ab6b44c32fd3513445639c0a1e0a26834895b78
- SHA512 8e032f033b724e06a6bcc8d3ea9cd1e0a2097dcfc620a406880b095d9d5bf9e3796803ef8eeb4aa39f82158b17c561e9dbf98553b749568166a6d7e48c176cfa
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5X:WZaClSFlG4ZM7QlV1
- TLSH T1C7557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects FlyAgent Backdoor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE