General
- Target 27f897d54eb6673027b509469e02364445ede5a9002060c49e29d02976c9a89e
- Size 387KB
- Sample260528-ejtgqsgw91
- SHA256 27f897d54eb6673027b509469e02364445ede5a9002060c49e29d02976c9a89e
- MD5 8c9a1a37fd5d2c8235527c6ae1c8b70f
- SHA1 9e462de3174196602af587654a70ada3bf029dfa
- SHA512 79b14e0e284b07644b78a244b2f923e44269297fa7e5c58a9f30515f659a0272ab0ad9c40b7d268c0071b7ad9ec9dc138d169d8e842024e12c9bd418ae78a5d7
- SSDEEP 6144:DVfjmNgNwc33Evv+dfxafGu78vuz3INvBO+XTZTfuL7NdygtMdN4dhHBVO60m:Z7+1c3c76uz3sBO+XThuL5dtMdN8Bb0m
- TLSH T123847D117790DF31E66F05369A6897B45A6F7C208F2487DB23943E2DBE302C1A935B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
27f897d54eb6673027b509469e02364445ede5a9002060c49e29d02976c9a89e.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
27f897d54eb6673027b509469e02364445ede5a9002060c49e29d02976c9a89e.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 27f897d54eb6673027b509469e02364445ede5a9002060c49e29d02976c9a89e
- Size 387KB
- SHA256 27f897d54eb6673027b509469e02364445ede5a9002060c49e29d02976c9a89e
- MD5 8c9a1a37fd5d2c8235527c6ae1c8b70f
- SHA1 9e462de3174196602af587654a70ada3bf029dfa
- SHA512 79b14e0e284b07644b78a244b2f923e44269297fa7e5c58a9f30515f659a0272ab0ad9c40b7d268c0071b7ad9ec9dc138d169d8e842024e12c9bd418ae78a5d7
- SSDEEP 6144:DVfjmNgNwc33Evv+dfxafGu78vuz3INvBO+XTZTfuL7NdygtMdN4dhHBVO60m:Z7+1c3c76uz3sBO+XThuL5dtMdN8Bb0m
- TLSH T123847D117790DF31E66F05369A6897B45A6F7C208F2487DB23943E2DBE302C1A935B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.