General
- Target moduladordevoz.exe
- Size 380KB
- Sample260701-frrtjsey3p
- SHA256 2bfc1657c918035fab5fa2da8e4e76d54cf9b65ac1e65dcdede65cc19a6771f6
- MD5 fdc726071430ada68e117f6f12f01322
- SHA1 2daa8755f47713b00c1dbefe7d9c8e4c5690518b
- SHA512 a5cb35ea0e5c6bb4553d258bcad76ea52db30370e84a065d6ca4e2924b08e6d2af85f6cde5dc99fc7c4e4396408a4fb390e2401026ae9698c1fcca3380f0aaeb
- SSDEEP 6144:TMM8fApOSxvbaiwb7AyT21XOHxXAsEbzd/CAuQ0ykuyoJlbOSvT+Pn1IB:N8f8vbad7Aya0R47uZuxJ7vT+/C
- TLSH T1DF8423447A428BE2C5FC0EFEEB795FEF7652D8A3822E5436964055F2ED50883578C28C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
moduladordevoz.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
moduladordevoz.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target moduladordevoz.exe
- Size 380KB
- SHA256 2bfc1657c918035fab5fa2da8e4e76d54cf9b65ac1e65dcdede65cc19a6771f6
- MD5 fdc726071430ada68e117f6f12f01322
- SHA1 2daa8755f47713b00c1dbefe7d9c8e4c5690518b
- SHA512 a5cb35ea0e5c6bb4553d258bcad76ea52db30370e84a065d6ca4e2924b08e6d2af85f6cde5dc99fc7c4e4396408a4fb390e2401026ae9698c1fcca3380f0aaeb
- SSDEEP 6144:TMM8fApOSxvbaiwb7AyT21XOHxXAsEbzd/CAuQ0ykuyoJlbOSvT+Pn1IB:N8f8vbad7Aya0R47uZuxJ7vT+/C
- TLSH T1DF8423447A428BE2C5FC0EFEEB795FEF7652D8A3822E5436964055F2ED50883578C28C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL