General
- Target 7a97266ccc6431da7275ae3a6a336b834ebb318f54314ed24706d2f29f9b1add
- Size 1.3MB
- Sample260529-bj5yzsfx2s
- SHA256 7a97266ccc6431da7275ae3a6a336b834ebb318f54314ed24706d2f29f9b1add
- MD5 2df4305a11f1bbec4716b921cefcce15
- SHA1 430295015d232cb69a8575588c774444acde741f
- SHA512 ff337ee4c80872ac97132a0b718e06645625e5834a89c77be49d044beea5b7e4b9056d6d66f2f468975abc74fd625f8f99c74d533e3cf71ec1f562d89ecb10eb
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5m:WZaClSFlG4ZM7QlVY
- TLSH T19C557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
7a97266ccc6431da7275ae3a6a336b834ebb318f54314ed24706d2f29f9b1add.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 7a97266ccc6431da7275ae3a6a336b834ebb318f54314ed24706d2f29f9b1add
- Size 1.3MB
- SHA256 7a97266ccc6431da7275ae3a6a336b834ebb318f54314ed24706d2f29f9b1add
- MD5 2df4305a11f1bbec4716b921cefcce15
- SHA1 430295015d232cb69a8575588c774444acde741f
- SHA512 ff337ee4c80872ac97132a0b718e06645625e5834a89c77be49d044beea5b7e4b9056d6d66f2f468975abc74fd625f8f99c74d533e3cf71ec1f562d89ecb10eb
- SSDEEP 24576:WBS9qQEK6QywlBqH82QoXFkrzkmmlSgRDko0lG4Z8r7Qfd7iu5m:WZaClSFlG4ZM7QlVY
- TLSH T19C557C13F692C0F1E61C227124FB6339BE7497450A71CACBE794DD791C32691ABA720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects FlyAgent Backdoor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE