General
- Target 2.0.exe
- Size 3.7MB
- Sample260604-vgkd2sby2j
- SHA256 94b9522a2dd130419b9880df1e91814b556955fb25b7aba294758edfec77bc42
- MD5 c61205d1322cc327949ae535d8175ef1
- SHA1 efba7aceb6047487a54c2e41e6a6048f56fb9605
- SHA512 9838684090d3e2443f18e1d4660c82181bd8e90364a3455d16896026a39e1f8bbc2ff1fb45be45ee410abea17323af33cded249d0e3cd4f358679f891da9af1e
- SSDEEP 98304:kgOTEHMPzoEx9Y5kvGQ7npjofC87RGv/RTSFIJtQosTfrdh:kgOTMmckRGQ7npjofC87RGv/RTSFUQvj
- TLSH T15D068D8BA2AD10D4D5B6D078C607464BD7B1B839033797CF0265CB5E2F3B6A24E3A365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2.0.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2.0.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2.0.exe
- Size 3.7MB
- SHA256 94b9522a2dd130419b9880df1e91814b556955fb25b7aba294758edfec77bc42
- MD5 c61205d1322cc327949ae535d8175ef1
- SHA1 efba7aceb6047487a54c2e41e6a6048f56fb9605
- SHA512 9838684090d3e2443f18e1d4660c82181bd8e90364a3455d16896026a39e1f8bbc2ff1fb45be45ee410abea17323af33cded249d0e3cd4f358679f891da9af1e
- SSDEEP 98304:kgOTEHMPzoEx9Y5kvGQ7npjofC87RGv/RTSFIJtQosTfrdh:kgOTMmckRGQ7npjofC87RGv/RTSFUQvj
- TLSH T15D068D8BA2AD10D4D5B6D078C607464BD7B1B839033797CF0265CB5E2F3B6A24E3A365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.