General
- Target CollapseLoader_9.9.9.exe
- Size 20.4MB
- Sample260622-dj75fshv2t
- SHA256 8269e0830ae98c5ecf5275ddf6b4c87adba693ebf0fb6f3299b7fee6bb7e3eb3
- MD5 58c078adfd8c69f9fe4679cc8158c100
- SHA1 00e4edf2a72babb7aa7eaa62d34bf5fec35be0f2
- SHA512 af0852aa4c73663fb4876f1027e1c1a24c7f8308b619de97451dca8d00e14a07bd0fa98bb45e864c738d2ba26e466b50957893ab2926981406318c77b8fa781c
- SSDEEP 196608:xZKd3LRiQHc5i+kHMnULL6xuljoz03r+xMit4jwK:y3LRiQHgqMUKxioz++xMs4j3
- TLSH T19E271A117A5F99BCD19AC8B083474A774E2130DB0A36B9BF44C452393F6DBF46B2931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CollapseLoader_9.9.9.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
CollapseLoader_9.9.9.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target CollapseLoader_9.9.9.exe
- Size 20.4MB
- SHA256 8269e0830ae98c5ecf5275ddf6b4c87adba693ebf0fb6f3299b7fee6bb7e3eb3
- MD5 58c078adfd8c69f9fe4679cc8158c100
- SHA1 00e4edf2a72babb7aa7eaa62d34bf5fec35be0f2
- SHA512 af0852aa4c73663fb4876f1027e1c1a24c7f8308b619de97451dca8d00e14a07bd0fa98bb45e864c738d2ba26e466b50957893ab2926981406318c77b8fa781c
- SSDEEP 196608:xZKd3LRiQHc5i+kHMnULL6xuljoz03r+xMit4jwK:y3LRiQHgqMUKxioz++xMs4j3
- TLSH T19E271A117A5F99BCD19AC8B083474A774E2130DB0A36B9BF44C452393F6DBF46B2931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Drops file in System32 directory