General
- Target KSpeak.Helper.exe
- Size 33.8MB
- Sample260428-algthaaz8w
- SHA256 5b3d8192914d8884bed6cf419ee805e0cc3825ea317c6965c62324183eb58e40
- MD5 fc488feb24ef7a807c60d61d156d6abf
- SHA1 527d88552b114ac0648c31a7c7dc578b011092fc
- SHA512 55804e2c10c944924b802ce193d6576d6f3e7de46c74b0b55a7280de80b532c3a0278b476661d37684096827a2f11c61ed030d6ac9c0210d8645ec0ec651f193
- SSDEEP 786432:XdJhLPVGZmiedyvzKeZ38ZOeJiW70WDJMeI3lO:tnBpdkzKAybi4vNMeIg
- TLSH T1D4771256E2F900E8D5BBC0B8C6575517EBB2345517309BEF52A48A692F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KSpeak.Helper.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
KSpeak.Helper.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target KSpeak.Helper.exe
- Size 33.8MB
- SHA256 5b3d8192914d8884bed6cf419ee805e0cc3825ea317c6965c62324183eb58e40
- MD5 fc488feb24ef7a807c60d61d156d6abf
- SHA1 527d88552b114ac0648c31a7c7dc578b011092fc
- SHA512 55804e2c10c944924b802ce193d6576d6f3e7de46c74b0b55a7280de80b532c3a0278b476661d37684096827a2f11c61ed030d6ac9c0210d8645ec0ec651f193
- SSDEEP 786432:XdJhLPVGZmiedyvzKeZ38ZOeJiW70WDJMeI3lO:tnBpdkzKAybi4vNMeIg
- TLSH T1D4771256E2F900E8D5BBC0B8C6575517EBB2345517309BEF52A48A692F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE