General
- Target tmpr20yufsh
- Size 63KB
- Sample260704-1lyecset4v
- SHA256 01a735e9cc5dd54fd614630513e391f98028e7ef603e270c5300a127fb1d10aa
- MD5 8088b210e5304b87001dcf333d02aaad
- SHA1 6cf99f842786045213128221f7acb6b33c3f101d
- SHA512 61c3d5811203b7c283151fde91dac7f8f67e04e3ad86fd768c808c8b074efcb96257caca29d12be38c5de5b7b560553ac71bb078062086d623165efb8265cc7a
- SSDEEP 768:RVSJwmwf4NOj1TS5of/2DG86/LO8PqJuFTgwslRcW9KKldco25S:rmwfKOj1TRf/2SZLO8iJu7I9KKlD25S
- TLSH T13E537B38AED51572E37BDAB6C6F251C6F975BC233D02680D408673850C33F66ADA1A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmpr20yufsh.exe
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpr20yufsh.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpr20yufsh.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target tmpr20yufsh
- Size 63KB
- SHA256 01a735e9cc5dd54fd614630513e391f98028e7ef603e270c5300a127fb1d10aa
- MD5 8088b210e5304b87001dcf333d02aaad
- SHA1 6cf99f842786045213128221f7acb6b33c3f101d
- SHA512 61c3d5811203b7c283151fde91dac7f8f67e04e3ad86fd768c808c8b074efcb96257caca29d12be38c5de5b7b560553ac71bb078062086d623165efb8265cc7a
- SSDEEP 768:RVSJwmwf4NOj1TS5of/2DG86/LO8PqJuFTgwslRcW9KKldco25S:rmwfKOj1TRf/2SZLO8iJu7I9KKlD25S
- TLSH T13E537B38AED51572E37BDAB6C6F251C6F975BC233D02680D408673850C33F66ADA1A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE