General
- Target 2.exe
- Size 5.7MB
- Sample260705-wssegaex7s
- SHA256 194bef1eb8770c78baf6b4fb42b7866943d15c0cb8d96ca9fbed44171ceab307
- MD5 d64b026c606b4646c37007f0547a624e
- SHA1 d48c6cc49a69fef7fb3c6008581d2369b11d664f
- SHA512 ae595ad38a940f047b4a0536e9e1841d7fe1a22783897691bbcdc8107492b7493e1fc8d3b4709e1da8dc20675e2db6fbe911179e53f853b35d0705a40e54fda2
- SSDEEP 98304:p7YCH80++s6MM0izSDI+Z3zPHS5/BKfxMEud3Em+cTCu1Jj+H8WhQ7H+wTRh6WwV:pkpQs6Zl+dzPHGOrud0qT31obk+wnwG
- TLSH T116563380F6F0C5B7F5FB57FA289B92E639923D25DA78161F3A0D779D857CA00D858008
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2.exe
- Size 5.7MB
- SHA256 194bef1eb8770c78baf6b4fb42b7866943d15c0cb8d96ca9fbed44171ceab307
- MD5 d64b026c606b4646c37007f0547a624e
- SHA1 d48c6cc49a69fef7fb3c6008581d2369b11d664f
- SHA512 ae595ad38a940f047b4a0536e9e1841d7fe1a22783897691bbcdc8107492b7493e1fc8d3b4709e1da8dc20675e2db6fbe911179e53f853b35d0705a40e54fda2
- SSDEEP 98304:p7YCH80++s6MM0izSDI+Z3zPHS5/BKfxMEud3Em+cTCu1Jj+H8WhQ7H+wTRh6WwV:pkpQs6Zl+dzPHGOrud0qT31obk+wnwG
- TLSH T116563380F6F0C5B7F5FB57FA289B92E639923D25DA78161F3A0D779D857CA00D858008
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL