General
- Target v2rayN.zip
- Size 7.8MB
- Sample260424-w1jsasft31
- SHA256 0d7b888dd41d0dab95b82f268245205b30fe758af5fabfb6ca799192c5b1e747
- MD5 a0a2cd3c8bb518d4964050ae94dd617c
- SHA1 ade1b9aa749bae579f4f876873e9144e9b7516dd
- SHA512 ec0e395a8b69e2232a459befbd8df7f1c7256558483e2cad48dd814eae60a4643cecc9bb94b7d92def7780d79608a6004f664f064f0ae34cc6da4f12ec873551
- SSDEEP 196608:ZmdXoDeVGJQ2bKqqHQnWIMVxK3i0UlYemAxvVG5:ZmJQeY1278JM0i0StmGG5
- TLSH T1F78633EA5A7634EED76DD8F74E608D00CEF89CCB11032130933A486EA957D7758C4B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v2rayN.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
v2rayN.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target v2rayN.exe
- Size 26.8MB
- SHA256 3b17dfa90356d0c81bb18b0c9a1995c863af9a1965a035c59fd9c1f811b3e611
- MD5 9b00fdfd610130fb80cb8e77cbae0017
- SHA1 8ab9b73f424394985c1d7b780ea19fa4e70ac3a8
- SHA512 219bb3e90b3c0dd8c912f940239be6ec1cc92ace068e0a8edb785d5ea1d2f0d51f479f1f23f7e85fba1416f2ce714aec17a288e95d19b2f67d6d4d48f6f68ba6
- SSDEEP 196608:lNCTYT2EsH1b9L1BDdPij/9wlgQHjoD3aXYWR6OQ0/fv3qDCe4ljh3iLiAUjUhqJ:lgTYT2EsH1b9DdPijFJQc+3ZzlSLiAU
- TLSH T1EC57AE99E9D92298C13B807846AFA743FA21381947741EF302E58E741F777D07E3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext