General
- Target microsoft-office-2024-16-0-18025-20140.exe
- Size 7.2MB
- Sample260701-3kshtshv5v
- SHA256 e950db34a18a2a34fd0fcde97009218c69c9b39fefc328cbe013a386cb6004a1
- MD5 94d8237c93ca773771bfb5b3f2314c17
- SHA1 34ebd1493b3dcc5ec2dce16b4d3d4f731b189f6b
- SHA512 1211ee06dbfcc512147826f7b662f512710933e20c32a04e9c882569f16e53a9fc14ac413119207223746c224ac072a4d0c9f04b24845b093212937a2622c829
- SSDEEP 196608:B5yeJSOxmp+8jIh/FdF3bx30bqGdiZhQNGIwWar45iWaI6HMaJTtGb5k1:3Qj+8jyF73V3xZ7ck1
- TLSH T12F767C33A6D6CC36F5B7E2F0AD7DAF1944BABE720930801F6384D64D1AB0982D525727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
microsoft-office-2024-16-0-18025-20140.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
microsoft-office-2024-16-0-18025-20140.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target microsoft-office-2024-16-0-18025-20140.exe
- Size 7.2MB
- SHA256 e950db34a18a2a34fd0fcde97009218c69c9b39fefc328cbe013a386cb6004a1
- MD5 94d8237c93ca773771bfb5b3f2314c17
- SHA1 34ebd1493b3dcc5ec2dce16b4d3d4f731b189f6b
- SHA512 1211ee06dbfcc512147826f7b662f512710933e20c32a04e9c882569f16e53a9fc14ac413119207223746c224ac072a4d0c9f04b24845b093212937a2622c829
- SSDEEP 196608:B5yeJSOxmp+8jIh/FdF3bx30bqGdiZhQNGIwWar45iWaI6HMaJTtGb5k1:3Qj+8jyF73V3xZ7ck1
- TLSH T12F767C33A6D6CC36F5B7E2F0AD7DAF1944BABE720930801F6384D64D1AB0982D525727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory