General
- Target 3f742821e0c16813690060914268d636a0a18863519656ce56f293357a802610
- Size 1.3MB
- Sample260424-j2xpbsbz2w
- SHA256 3f742821e0c16813690060914268d636a0a18863519656ce56f293357a802610
- MD5 51cc4a0f9746b3c5ed4ba3ff041e8759
- SHA1 5a1b8ca5031f9ab1c7b7a6c9aa4cee018f9335a7
- SHA512 645d8b247bccbdd92e0cfe17cf2ddc739c0e9227366cd412afef023d6ed5e40640ae8fe7a0feb45bcee3534529b4937a71cbde712a30da76b83d964947fa1d46
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5o:WZaClSFlG4ZM7QlV2
- TLSH T185557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3f742821e0c16813690060914268d636a0a18863519656ce56f293357a802610.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3f742821e0c16813690060914268d636a0a18863519656ce56f293357a802610
- Size 1.3MB
- SHA256 3f742821e0c16813690060914268d636a0a18863519656ce56f293357a802610
- MD5 51cc4a0f9746b3c5ed4ba3ff041e8759
- SHA1 5a1b8ca5031f9ab1c7b7a6c9aa4cee018f9335a7
- SHA512 645d8b247bccbdd92e0cfe17cf2ddc739c0e9227366cd412afef023d6ed5e40640ae8fe7a0feb45bcee3534529b4937a71cbde712a30da76b83d964947fa1d46
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5o:WZaClSFlG4ZM7QlV2
- TLSH T185557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects FlyAgent Backdoor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE