General
- Target 62dd83f6a460058e3add82cad4450613422c05ce2832df58c3242197b000269f
- Size 580KB
- Sample260703-kf9mfaax9l
- SHA256 62dd83f6a460058e3add82cad4450613422c05ce2832df58c3242197b000269f
- MD5 9958c80343d47398758394870f4b4e85
- SHA1 4aa76880a711eaba775efdb39bb96f3baaf97a2c
- SHA512 c216d7496f556e7b786b532b85c1f5cf28f26d88a54a9dc428bdf5960a87640879fede503de8c40611bbd1b32299b9e4825e70f252229416b2cdb64f54d49918
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JG:QptHFyrsy7t+TSQDsy777vxCRbapnG
- TLSH T13CC4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
62dd83f6a460058e3add82cad4450613422c05ce2832df58c3242197b000269f.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
62dd83f6a460058e3add82cad4450613422c05ce2832df58c3242197b000269f.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 62dd83f6a460058e3add82cad4450613422c05ce2832df58c3242197b000269f
- Size 580KB
- SHA256 62dd83f6a460058e3add82cad4450613422c05ce2832df58c3242197b000269f
- MD5 9958c80343d47398758394870f4b4e85
- SHA1 4aa76880a711eaba775efdb39bb96f3baaf97a2c
- SHA512 c216d7496f556e7b786b532b85c1f5cf28f26d88a54a9dc428bdf5960a87640879fede503de8c40611bbd1b32299b9e4825e70f252229416b2cdb64f54d49918
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JG:QptHFyrsy7t+TSQDsy777vxCRbapnG
- TLSH T13CC4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE