General
- Target _c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d.exe
- Size 1.9MB
- Sample260626-sfcxgact5v
- SHA256 c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d
- MD5 481b030071c78a6d71901654b7fa4dcd
- SHA1 03fab2a83b8b4f563133d4b7b4b8f0cc5018ec5d
- SHA512 6b0cbb9ac12dc44b673cbcd9d0d3f08a1ec08ac254fdd6e2042d907a4dfbd7b6da05d1691327625bd6b38b28a6800bae7f2d1d12edb9aca92540563e63158ac2
- SSDEEP 24576:tBT3IdwagHtoI7Wtgu/917dYl4R0KuGk2XGA+t:tBT3IdwagH6I7Wtgi7dYlkkMl+
- TLSH T1A395229D6A4450F2C57452F58D0805B8A2BEFD1F3E203925BA38AB212C77786DFB8375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
_c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d.exe
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target _c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d.exe
- Size 1.9MB
- SHA256 c6ea91b2783f566fdc1992ee1a380f26d358bc4a9e25f9675494aed0d069f16d
- MD5 481b030071c78a6d71901654b7fa4dcd
- SHA1 03fab2a83b8b4f563133d4b7b4b8f0cc5018ec5d
- SHA512 6b0cbb9ac12dc44b673cbcd9d0d3f08a1ec08ac254fdd6e2042d907a4dfbd7b6da05d1691327625bd6b38b28a6800bae7f2d1d12edb9aca92540563e63158ac2
- SSDEEP 24576:tBT3IdwagHtoI7Wtgu/917dYl4R0KuGk2XGA+t:tBT3IdwagH6I7Wtgi7dYlkkMl+
- TLSH T1A395229D6A4450F2C57452F58D0805B8A2BEFD1F3E203925BA38AB212C77786DFB8375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.