General
- Target 8b405babdd7993d80bce30bc180457946b5ddf614510f9a1372c647ccec3278c
- Size 1.3MB
- Sample260428-sc6qdabs2x
- SHA256 8b405babdd7993d80bce30bc180457946b5ddf614510f9a1372c647ccec3278c
- MD5 897d5f47c3c3f514030ebac05cc8db8c
- SHA1 5d3ac8533ca2bbb379c547ca852985d4d6b4207b
- SHA512 155d421a17a1e46467b96942487a2214d8a850a796fb60ddaa1e8fa6c379f79fcd34d3d77ff6a47fb42b9cd3f44998498c2ae8c9f04a4f7c383aac0d711409f4
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5P:WZaClSFlG4ZM7QlV9
- TLSH T16C557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
8b405babdd7993d80bce30bc180457946b5ddf614510f9a1372c647ccec3278c.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8b405babdd7993d80bce30bc180457946b5ddf614510f9a1372c647ccec3278c
- Size 1.3MB
- SHA256 8b405babdd7993d80bce30bc180457946b5ddf614510f9a1372c647ccec3278c
- MD5 897d5f47c3c3f514030ebac05cc8db8c
- SHA1 5d3ac8533ca2bbb379c547ca852985d4d6b4207b
- SHA512 155d421a17a1e46467b96942487a2214d8a850a796fb60ddaa1e8fa6c379f79fcd34d3d77ff6a47fb42b9cd3f44998498c2ae8c9f04a4f7c383aac0d711409f4
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5P:WZaClSFlG4ZM7QlV9
- TLSH T16C557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects FlyAgent Backdoor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.