General
- Target 8710.png
- Size 143KB
- Sample260701-vj7mcscv4z
- SHA256 2add384bce5041f81ec634ccff28f56cb5a851ef04a3e065283ab17210635601
- MD5 04c84471306c720648064eca700007cb
- SHA1 477134d034c13566d35af0a335eb93241ea97236
- SHA512 34c8a035cb07ecbc6aa5364411201eedd3afda3a3ea63ff5f7b19b6a298a16d964845bb41400b39f6980a1a97f98ce8b43a2b362c70b9f6847b1e5c45bd80cf5
- SSDEEP 3072:1pWp4wLOx5I5QeCAzLbF7Vh7cHVeq1vYpnWooyP7PSC/DW:1ofLOnI5hNLQHhk7T7aC/y
- TLSH T138E3128FE5D893233ED3A34D2D345E22ABB7114F9AF012B98D6204552E21F799078B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
8710.png
Resource
win10v2004-20260513-en
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
8710.png
Resource
win11ltsc2024-20260630-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 8710.png
- Size 143KB
- SHA256 2add384bce5041f81ec634ccff28f56cb5a851ef04a3e065283ab17210635601
- MD5 04c84471306c720648064eca700007cb
- SHA1 477134d034c13566d35af0a335eb93241ea97236
- SHA512 34c8a035cb07ecbc6aa5364411201eedd3afda3a3ea63ff5f7b19b6a298a16d964845bb41400b39f6980a1a97f98ce8b43a2b362c70b9f6847b1e5c45bd80cf5
- SSDEEP 3072:1pWp4wLOx5I5QeCAzLbF7Vh7cHVeq1vYpnWooyP7PSC/DW:1ofLOnI5hNLQHhk7T7aC/y
- TLSH T138E3128FE5D893233ED3A34D2D345E22ABB7114F9AF012B98D6204552E21F799078B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.