General
- Target Downloads.zip
- Size 4.5MB
- Sample260627-v2a14scw5j
- SHA256 792f964efb748ad95966a98dc11d3ca0bd2ef50f010f4976dcf362f45d02bb1d
- MD5 3896231addcd4c019d870e983cb825b9
- SHA1 1cdf844ad9dfdf61969047ecadccb67d1692a4aa
- SHA512 15bcb9f7e31851102befcb19e55f83f2f90910528ee90dcc60f6c62b59e9e5a7e2b1826ea05d8606d0297458ba5f8586b6a518d32934a4b36c8c7048f21a630f
- SSDEEP 98304:1PSiHeO1ZwXO+GYg5e3FqyktcdyH8+tQAgKJ2sY9EYjUpx/Ob:9SiHeOfzYF1qyI1N2X9ETnW
- TLSH T1B72633F5446DAB3D2051C5775EA40B93269C890E6F77B8C8E47D20D5B4EBACBFA0A00D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Downloads.zip
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Downloads.zip
- Size 4.5MB
- SHA256 792f964efb748ad95966a98dc11d3ca0bd2ef50f010f4976dcf362f45d02bb1d
- MD5 3896231addcd4c019d870e983cb825b9
- SHA1 1cdf844ad9dfdf61969047ecadccb67d1692a4aa
- SHA512 15bcb9f7e31851102befcb19e55f83f2f90910528ee90dcc60f6c62b59e9e5a7e2b1826ea05d8606d0297458ba5f8586b6a518d32934a4b36c8c7048f21a630f
- SSDEEP 98304:1PSiHeO1ZwXO+GYg5e3FqyktcdyH8+tQAgKJ2sY9EYjUpx/Ob:9SiHeOfzYF1qyI1N2X9ETnW
- TLSH T1B72633F5446DAB3D2051C5775EA40B93269C890E6F77B8C8E47D20D5B4EBACBFA0A00D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare services registry key.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL