General
- Target 0fe972a442a2a81291c38a4f5a5f08ad427988e341477971f98eb475efc63643
- Size 896KB
- Sample260702-ldp1paft2x
- SHA256 0fe972a442a2a81291c38a4f5a5f08ad427988e341477971f98eb475efc63643
- MD5 6adab7a4031a1272e27e690db5a862f8
- SHA1 484d9b6994dd2ea9323c0db2e3e5aa330ca6d324
- SHA512 861069073b5264b48abe7b685a5592fa3915a15a420d851086c794f06e3de2451572ca0e7d76b953443599530758ae98c3b9264efbc88b346f2145ef8030025a
- SSDEEP 12288:aqi5Kg+u+B7GsvnMEytcrpTvrNwGMxp6aA75DJdN+lmR9WP8YmO:ni5P+uK75vMEyyrJMIJJL+O9K8YmO
- TLSH T13A159E12F6DA80F2C715253104BA773ADA31F6070B25EBD3936AEE2D6C33191EA37156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0fe972a442a2a81291c38a4f5a5f08ad427988e341477971f98eb475efc63643.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
0fe972a442a2a81291c38a4f5a5f08ad427988e341477971f98eb475efc63643.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0fe972a442a2a81291c38a4f5a5f08ad427988e341477971f98eb475efc63643
- Size 896KB
- SHA256 0fe972a442a2a81291c38a4f5a5f08ad427988e341477971f98eb475efc63643
- MD5 6adab7a4031a1272e27e690db5a862f8
- SHA1 484d9b6994dd2ea9323c0db2e3e5aa330ca6d324
- SHA512 861069073b5264b48abe7b685a5592fa3915a15a420d851086c794f06e3de2451572ca0e7d76b953443599530758ae98c3b9264efbc88b346f2145ef8030025a
- SSDEEP 12288:aqi5Kg+u+B7GsvnMEytcrpTvrNwGMxp6aA75DJdN+lmR9WP8YmO:ni5P+uK75vMEyyrJMIJJL+O9K8YmO
- TLSH T13A159E12F6DA80F2C715253104BA773ADA31F6070B25EBD3936AEE2D6C33191EA37156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application