General
- Target plauge.exe
- Size 16.3MB
- Sample260622-mn9nhsbv8w
- SHA256 2af66155c2e3e53b7068e820f6387d18fdfa4276faa18b1d0337410d096336e2
- MD5 05fe479368179099a9ee67e9c0dfa085
- SHA1 185b64b062fb6e56b8230814b857d108e41e309b
- SHA512 2de467672e44cb50a334d542382e773a5e2b2b7f421bc4ff96bcb4b0e6f994201121530633116ce820b3995e403d3d2ff0ffc88ad1cb5e0995ee596f2079f34c
- SSDEEP 196608:TP4FMIZETSRjPePdrQJF0BAnPh4OKJsTBq3hNA0nZSfBZYZee8p8rJup6EjS8XTI:bQETSRvJFDxdBohNdn8Eee8gaTde
- TLSH T14B07338393A089FBD3818474C099E7656AB2B53E9F6605063EE465CD3F0BB94187EF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
plauge.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target plauge.exe
- Size 16.3MB
- SHA256 2af66155c2e3e53b7068e820f6387d18fdfa4276faa18b1d0337410d096336e2
- MD5 05fe479368179099a9ee67e9c0dfa085
- SHA1 185b64b062fb6e56b8230814b857d108e41e309b
- SHA512 2de467672e44cb50a334d542382e773a5e2b2b7f421bc4ff96bcb4b0e6f994201121530633116ce820b3995e403d3d2ff0ffc88ad1cb5e0995ee596f2079f34c
- SSDEEP 196608:TP4FMIZETSRjPePdrQJF0BAnPh4OKJsTBq3hNA0nZSfBZYZee8p8rJup6EjS8XTI:bQETSRvJFDxdBohNdn8Eee8gaTde
- TLSH T14B07338393A089FBD3818474C099E7656AB2B53E9F6605063EE465CD3F0BB94187EF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application