General
- Target Codex Installer.exe
- Size 1.3MB
- Sample260626-rn53jscy7p
- SHA256 574b3935a9e42e65658ff5bccf2856b596112cfca61d94243f048454c9eead57
- MD5 7a154584fd26e2ebcc8313231e4055fa
- SHA1 b852a0ceca02f3ec26ef2ad1874358caba916261
- SHA512 940a9f76b61ce70122e3ed6c390d7aae3abe4b18afa2496fcfb789b6237ce20a02c3a1651a91420022f15d47d845baf5be213ca382114a748ad3e4f7766eb33a
- SSDEEP 24576:NZNiktRd+2DR7BWYpy3o44RsW4z3cBW8p42:NHi07VQGsWAsnL
- TLSH T1D0555B8127FC1539F7B70B79BD7A28214A36BC39A502E65E054D192D08F2F568DE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Codex Installer.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Codex Installer.exe
Resource
win11ltsc2024-20260617-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Codex Installer.exe
- Size 1.3MB
- SHA256 574b3935a9e42e65658ff5bccf2856b596112cfca61d94243f048454c9eead57
- MD5 7a154584fd26e2ebcc8313231e4055fa
- SHA1 b852a0ceca02f3ec26ef2ad1874358caba916261
- SHA512 940a9f76b61ce70122e3ed6c390d7aae3abe4b18afa2496fcfb789b6237ce20a02c3a1651a91420022f15d47d845baf5be213ca382114a748ad3e4f7766eb33a
- SSDEEP 24576:NZNiktRd+2DR7BWYpy3o44RsW4z3cBW8p42:NHi07VQGsWAsnL
- TLSH T1D0555B8127FC1539F7B70B79BD7A28214A36BC39A502E65E054D192D08F2F568DE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.