General
- Target Dezor-v4.2.2-x86_64.exe
- Size 93.7MB
- Sample260705-xkmppaax8l
- SHA256 614ceddea889f449d3d22f28bb5ca7fd21c80b1503c6a70d03c770adc2a87b65
- MD5 4e04c56a5b66f3942588389243337632
- SHA1 277b0587d3ace86934f90fa8979e3c4ba6f9462b
- SHA512 45479d79ad4301fd7cbbddc7aaf95873996cb553a856a51e83c54712f67f630ff55b3c638365b57b8b01f5e14a085b2e7f83b1e8a1b277fbcb8c02d3d11b6074
- SSDEEP 1572864:8vOHCnuATBRAjjPGtx2aP+HzHaGIz8MwOCuBOAAo0W4AM+:8DT2jPMx2G+YDBK5h+
- TLSH T12028337DC116E721E6E615F099D2DE7B7529011F4986C3BD48EBEC0EC6A08E43F04AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Dezor-v4.2.2-x86_64.exe
Resource
win10ltsc2021-20260513-de
16 signatures
600 seconds
Malware Config
Targets
-
- Target Dezor-v4.2.2-x86_64.exe
- Size 93.7MB
- SHA256 614ceddea889f449d3d22f28bb5ca7fd21c80b1503c6a70d03c770adc2a87b65
- MD5 4e04c56a5b66f3942588389243337632
- SHA1 277b0587d3ace86934f90fa8979e3c4ba6f9462b
- SHA512 45479d79ad4301fd7cbbddc7aaf95873996cb553a856a51e83c54712f67f630ff55b3c638365b57b8b01f5e14a085b2e7f83b1e8a1b277fbcb8c02d3d11b6074
- SSDEEP 1572864:8vOHCnuATBRAjjPGtx2aP+HzHaGIz8MwOCuBOAAo0W4AM+:8DT2jPMx2G+YDBK5h+
- TLSH T12028337DC116E721E6E615F099D2DE7B7529011F4986C3BD48EBEC0EC6A08E43F04AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist