General
- Target rs.exe
- Size 9.1MB
- Sample260703-nxt5vsds7n
- SHA256 9ba4d27dfc194bf1d457b84c861b73cd8db0a5f0a342c27bc3eeba67615362c2
- MD5 87fc6c48d7ad0f8e0529fdc73df59aa4
- SHA1 cc13f82e6ec43ab57dbb1bd4f72f0b35e716f302
- SHA512 bcbd666d59486fc49278e951bafec9d476dd55bd9d9f1eec28cde4885b31a594c41f4da7549f7a84aeb9626aaded6b9670cf00f0f755fd096b06d518d852f140
- SSDEEP 196608:NSLKOhhrsW4gXyTntTFqq8N3tzCMPWh1HsGXqrhpXFSFE7E:cLKOhhrGtZq5XzzC1HsGXq97SN
- TLSH T10BA6334893D015B7E897627C9AB3D166D2D0B8121722CDEF13D2572E3F772A4483A6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
rs.exe
Resource
win10ltsc2021-20260513-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target rs.exe
- Size 9.1MB
- SHA256 9ba4d27dfc194bf1d457b84c861b73cd8db0a5f0a342c27bc3eeba67615362c2
- MD5 87fc6c48d7ad0f8e0529fdc73df59aa4
- SHA1 cc13f82e6ec43ab57dbb1bd4f72f0b35e716f302
- SHA512 bcbd666d59486fc49278e951bafec9d476dd55bd9d9f1eec28cde4885b31a594c41f4da7549f7a84aeb9626aaded6b9670cf00f0f755fd096b06d518d852f140
- SSDEEP 196608:NSLKOhhrsW4gXyTntTFqq8N3tzCMPWh1HsGXqrhpXFSFE7E:cLKOhhrGtZq5XzzC1HsGXq97SN
- TLSH T10BA6334893D015B7E897627C9AB3D166D2D0B8121722CDEF13D2572E3F772A4483A6EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL