General
- Target Safe Domain Installer.exe
- Size 1.3MB
- Sample260628-2z5ahagy7n
- SHA256 6337c6f4cfa491bd095dc441939201eee2a09a120680843286f4714961090ef8
- MD5 45705ee00be8f8efd5021c46ba79d7c3
- SHA1 b83038afc21480784eaac855a07ee36a100af2ff
- SHA512 481b381482f67c7642bea00cc7e5d21eb4fbccd763b7c502e89ad3ce73665f3641074d81997e0ac18c5975e709a845617444db5874e2aeb6b99852d93b8adecf
- SSDEEP 24576:NZNiktRd+2DR7BWYpy3o44RsW4z3cBW8p4H:NHi07VQGsWAsnq
- TLSH T188555B8127FC1939F7B70B79BD7A28214A36BC399502E65E054D192D08F2F568DE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Safe Domain Installer.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Safe Domain Installer.exe
Resource
win11ltsc2024-20260617-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Safe Domain Installer.exe
- Size 1.3MB
- SHA256 6337c6f4cfa491bd095dc441939201eee2a09a120680843286f4714961090ef8
- MD5 45705ee00be8f8efd5021c46ba79d7c3
- SHA1 b83038afc21480784eaac855a07ee36a100af2ff
- SHA512 481b381482f67c7642bea00cc7e5d21eb4fbccd763b7c502e89ad3ce73665f3641074d81997e0ac18c5975e709a845617444db5874e2aeb6b99852d93b8adecf
- SSDEEP 24576:NZNiktRd+2DR7BWYpy3o44RsW4z3cBW8p4H:NHi07VQGsWAsnq
- TLSH T188555B8127FC1939F7B70B79BD7A28214A36BC399502E65E054D192D08F2F568DE233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.