General
- Target .
- Size 42KB
- Sample260705-ag8fnaaz6j
- SHA256 099b66b09bc2ebdc15f4e98ad0759984b6b5b099d377982028158ccdacf2d9f3
- MD5 9bfac1c75f5f8bf1682867b544bc715f
- SHA1 d8a8c4847f47c5609e7226d192b801773d3ae143
- SHA512 468c45ad0c1583d62e0ec2adaaea9f0a1ca015797fae78be1ef4c77b5bdff616191323e1f2155ed1db29eaf8460136427e22ac0e52b18841f5f13280ff87ec7e
- SSDEEP 768:RALPppqsUcghKi5WG+RfHAYnr6/h+85bj:EGsUcghK0WGMfHjnr6/h+8J
- TLSH T11613C726A5842172503797F6ABE3574EFAB48007C70647683BFC13864FF6E689963F48
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
.html
Resource
win10ltsc2021-20260513-en
26 signatures
600 seconds
Malware Config
Targets
-
- Target .
- Size 42KB
- SHA256 099b66b09bc2ebdc15f4e98ad0759984b6b5b099d377982028158ccdacf2d9f3
- MD5 9bfac1c75f5f8bf1682867b544bc715f
- SHA1 d8a8c4847f47c5609e7226d192b801773d3ae143
- SHA512 468c45ad0c1583d62e0ec2adaaea9f0a1ca015797fae78be1ef4c77b5bdff616191323e1f2155ed1db29eaf8460136427e22ac0e52b18841f5f13280ff87ec7e
- SSDEEP 768:RALPppqsUcghKi5WG+RfHAYnr6/h+85bj:EGsUcghK0WGMfHjnr6/h+8J
- TLSH T11613C726A5842172503797F6ABE3574EFAB48007C70647683BFC13864FF6E689963F48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.