General
- Target d9f60c778ccdc62309363a0ff5cc600f90584db64b805767c306268be37dc475.exe
- Size 1.3MB
- Sample260509-hld2lsb15x
- SHA256 d9f60c778ccdc62309363a0ff5cc600f90584db64b805767c306268be37dc475
- MD5 f7a819640dca1f317813b90367e4d8fa
- SHA1 eb4f14b668f382f645ab8ebe93dbf2534fd73c07
- SHA512 5637c318d64003cd96a859c5aadeb744719911859ac870e87d316261683d8272a8bb5ec39d165ef48903d3b606c7eb80826d6e268a69167767959fde3b9ec557
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5Y:WZaClSFlG4ZM7QlVm
- TLSH T150557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d9f60c778ccdc62309363a0ff5cc600f90584db64b805767c306268be37dc475.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target d9f60c778ccdc62309363a0ff5cc600f90584db64b805767c306268be37dc475.exe
- Size 1.3MB
- SHA256 d9f60c778ccdc62309363a0ff5cc600f90584db64b805767c306268be37dc475
- MD5 f7a819640dca1f317813b90367e4d8fa
- SHA1 eb4f14b668f382f645ab8ebe93dbf2534fd73c07
- SHA512 5637c318d64003cd96a859c5aadeb744719911859ac870e87d316261683d8272a8bb5ec39d165ef48903d3b606c7eb80826d6e268a69167767959fde3b9ec557
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5Y:WZaClSFlG4ZM7QlVm
- TLSH T150557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects FlyAgent Backdoor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE