General
- Target r6kll9wdc9h1jkkg.exe
- Size 809KB
- Sample260703-p4lbzaew2j
- SHA256 d3282ee0945ef263023dc8e0819da6b2e5df62d08d5bc184bafba0f07c05ac38
- MD5 95da5508ee3b5feea3cdbb982c6f571f
- SHA1 1a5fe265afac2172aba2a457600eb38013ec08f6
- SHA512 572bb1eede602994221a927760ea32818a1fa5ef0f333166aac4f20f9f3e560bcba21da423d8ecbb7e4d40b8944a6ab9b327a564f03438cbc08d5b423eebdcfb
- SSDEEP 12288:WcfZJzG+JAoY+fnE3AUmG8Hltlxpa6FF4YBPjAUY12bAPcDBOeuw:jrzgEHDpaALrG2kEDuw
- TLSH T18305E7243B94AE01E5401A3E96FE2608D73260F223136B47371BF7614D45AEEED6D3DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
r6kll9wdc9h1jkkg.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
r6kll9wdc9h1jkkg.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target r6kll9wdc9h1jkkg.exe
- Size 809KB
- SHA256 d3282ee0945ef263023dc8e0819da6b2e5df62d08d5bc184bafba0f07c05ac38
- MD5 95da5508ee3b5feea3cdbb982c6f571f
- SHA1 1a5fe265afac2172aba2a457600eb38013ec08f6
- SHA512 572bb1eede602994221a927760ea32818a1fa5ef0f333166aac4f20f9f3e560bcba21da423d8ecbb7e4d40b8944a6ab9b327a564f03438cbc08d5b423eebdcfb
- SSDEEP 12288:WcfZJzG+JAoY+fnE3AUmG8Hltlxpa6FF4YBPjAUY12bAPcDBOeuw:jrzgEHDpaALrG2kEDuw
- TLSH T18305E7243B94AE01E5401A3E96FE2608D73260F223136B47371BF7614D45AEEED6D3DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.