General
- Target tmp1imm9955
- Size 15.2MB
- Sample260702-pttklagx4p
- SHA256 0a842b81f9fecb60d528309624f464cee297e82acfef899901690f220d0eb445
- MD5 3cecbb9be8ea8cc7797a9ebcd4c36a23
- SHA1 1b9299a63cab87961b1787089e7b7d4113a1dec6
- SHA512 7eebace9f6bda1a0827744a72e1396590ec248889b11e752ba31924fdffac937a44783f784a682fe9f072d18ac00fe1e17f077844259b4b4606681a79f12200b
- SSDEEP 393216:uZ/+I/yr76hdZtXMCHWUjurRQ7XbFsn6eczYPrC69keFRBpGE:S/fa7KZtXMb8urRQ766/zYPrC6kePB9
- TLSH T184F63306D2B500F2FEEB853D46AAD82E9A79BC291B71D5C74AFC81339D534E4897C321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
tmp1imm9955.exe
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp1imm9955.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp1imm9955.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmp1imm9955
- Size 15.2MB
- SHA256 0a842b81f9fecb60d528309624f464cee297e82acfef899901690f220d0eb445
- MD5 3cecbb9be8ea8cc7797a9ebcd4c36a23
- SHA1 1b9299a63cab87961b1787089e7b7d4113a1dec6
- SHA512 7eebace9f6bda1a0827744a72e1396590ec248889b11e752ba31924fdffac937a44783f784a682fe9f072d18ac00fe1e17f077844259b4b4606681a79f12200b
- SSDEEP 393216:uZ/+I/yr76hdZtXMCHWUjurRQ7XbFsn6eczYPrC69keFRBpGE:S/fa7KZtXMb8urRQ766/zYPrC6kePB9
- TLSH T184F63306D2B500F2FEEB853D46AAD82E9A79BC291B71D5C74AFC81339D534E4897C321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application