General
- Target AtlasLoader.exe
- Size 2.2MB
- Sample260703-2ncq4sc15p
- SHA256 68fcfcb09a1e9a686853a5f187a50afa61ed07c4276c5491e844387dabe14edd
- MD5 f14ce8f75c967082ba8ccf1fd6fd1f5c
- SHA1 129678b29bce43a951e58399073866323eb1570b
- SHA512 6c10ea402a0f47308c368aa21ddce2632d0a7cf2445a3171836fe467e4c5893615832ed2095d7cdf6403eb6ebfeb31868be3434e6d4c1fc41de688bd19eedc12
- SSDEEP 49152:ZXqCzvC1NXvj2bEEOpKBMNWziIrJ33hIfQ6zv:uvj2YcNiIrJ33hIfQ6
- TLSH T1D0B5AF07A6D900F8D37EC174C56A9583E671B429D3A4CAEF23E499A50F232D71BF6702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AtlasLoader.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
AtlasLoader.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target AtlasLoader.exe
- Size 2.2MB
- SHA256 68fcfcb09a1e9a686853a5f187a50afa61ed07c4276c5491e844387dabe14edd
- MD5 f14ce8f75c967082ba8ccf1fd6fd1f5c
- SHA1 129678b29bce43a951e58399073866323eb1570b
- SHA512 6c10ea402a0f47308c368aa21ddce2632d0a7cf2445a3171836fe467e4c5893615832ed2095d7cdf6403eb6ebfeb31868be3434e6d4c1fc41de688bd19eedc12
- SSDEEP 49152:ZXqCzvC1NXvj2bEEOpKBMNWziIrJ33hIfQ6zv:uvj2YcNiIrJ33hIfQ6
- TLSH T1D0B5AF07A6D900F8D37EC174C56A9583E671B429D3A4CAEF23E499A50F232D71BF6702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Suspicious use of NtSetInformationThreadHideFromDebugger