General
- Target WockMultiV2.exe
- Size 85.2MB
- Sample260622-nt7xjsbt9k
- SHA256 2b17e2d146299d66815962b74d177cefb067103b4e966e111e3335c57db29463
- MD5 8700272e5eb5270ce5dd026a3ea3e893
- SHA1 04f641012739fbe6d71440bcbae846cab2b2d742
- SHA512 5d4ad2c03241f9c24e1d3cc8be672c068ff293629fbe7743d83584aa78929a92fb6c2aaefab500b8856422e3bf8d56d5c4a544e6c11b3df4fea3f0cebb284e55
- SSDEEP 1572864:I8SOcIRCXvc7DS7+FxCKlA7eWcZsvAEOdMWiPY+NqyJOae0kK5s/8uLZNJIG:QOcIRC/yDaMxCsEen+FOmH9J9Q8uLj
- TLSH T1B2183398F973A0A3819E6278AE1DFD6DF2F3B2134C2BC4930D36E55541280316F5E5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WockMultiV2.exe
Resource
win10ltsc2021-20260513-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target WockMultiV2.exe
- Size 85.2MB
- SHA256 2b17e2d146299d66815962b74d177cefb067103b4e966e111e3335c57db29463
- MD5 8700272e5eb5270ce5dd026a3ea3e893
- SHA1 04f641012739fbe6d71440bcbae846cab2b2d742
- SHA512 5d4ad2c03241f9c24e1d3cc8be672c068ff293629fbe7743d83584aa78929a92fb6c2aaefab500b8856422e3bf8d56d5c4a544e6c11b3df4fea3f0cebb284e55
- SSDEEP 1572864:I8SOcIRCXvc7DS7+FxCKlA7eWcZsvAEOdMWiPY+NqyJOae0kK5s/8uLZNJIG:QOcIRC/yDaMxCsEen+FOmH9J9Q8uLj
- TLSH T1B2183398F973A0A3819E6278AE1DFD6DF2F3B2134C2BC4930D36E55541280316F5E5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.