General
- Target f4be5fa7058f14d0e981cd797ef7705654e89a96e5787de5e341059d1b380c94
- Size 8.1MB
- Sample260701-vya7pscy2x
- SHA256 f4be5fa7058f14d0e981cd797ef7705654e89a96e5787de5e341059d1b380c94
- MD5 59dfaed7e71ae98d1966c49927c6c88f
- SHA1 73ac9efed2d998759f1c2b26d7c18edb82410ee6
- SHA512 10e4ca829be60ee316d02c0f12459f4d284a31464b64c7f7a696bffbebf7d2a8e9b5e15466943569738c8a1cd63a55a76c753e7a8045257b2f480e505efb31da
- SSDEEP 98304:M1Lz1E9uK0d1xASmLTaT4lwvLDjRx7GFOHwjjBi:O5E9uK0d1xASmLTrlwxwjjBi
- TLSH T14A869E11E943CED7E77909BA52A8CEECF1A6B6D093D9E1FB118034B4C415FF0687264A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f4be5fa7058f14d0e981cd797ef7705654e89a96e5787de5e341059d1b380c94.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
f4be5fa7058f14d0e981cd797ef7705654e89a96e5787de5e341059d1b380c94.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f4be5fa7058f14d0e981cd797ef7705654e89a96e5787de5e341059d1b380c94
- Size 8.1MB
- SHA256 f4be5fa7058f14d0e981cd797ef7705654e89a96e5787de5e341059d1b380c94
- MD5 59dfaed7e71ae98d1966c49927c6c88f
- SHA1 73ac9efed2d998759f1c2b26d7c18edb82410ee6
- SHA512 10e4ca829be60ee316d02c0f12459f4d284a31464b64c7f7a696bffbebf7d2a8e9b5e15466943569738c8a1cd63a55a76c753e7a8045257b2f480e505efb31da
- SSDEEP 98304:M1Lz1E9uK0d1xASmLTaT4lwvLDjRx7GFOHwjjBi:O5E9uK0d1xASmLTrlwxwjjBi
- TLSH T14A869E11E943CED7E77909BA52A8CEECF1A6B6D093D9E1FB118034B4C415FF0687264A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL