General
- Target Client.exe
- Size 56KB
- Sample260706-254k6ads7t
- SHA256 e234237afbd9ff7734d3d15a1b583e303c963b150538059cc726def2d09e2c06
- MD5 089ea57abe6e43cabf8c6c89f954f57d
- SHA1 919a540d43ee4122c8c9842e98c34a85960e865b
- SHA512 a258e6e2e6a1f113e8d6ec91b4ab684d5ba114929d11f3379f9c6b2ef3d70c45bf809dc591aa721233a665772b09f9e3ff611ab8b59878a4122906280ccdd980
- SSDEEP 768:wdiv4Kbwg2V+YV53fADYI1WQZSnqLMh0AoE7pwaambG4lRA3Sy80iLhXIgT:w+bQs0qLzECafbX3A3Sy80KpIgT
- TLSH T1BF434B083B9885ABD3ED4AB8A8F2535582B3F3631602E79E1CC451F60A137D75912EF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Client.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Client.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Client.exe
- Size 56KB
- SHA256 e234237afbd9ff7734d3d15a1b583e303c963b150538059cc726def2d09e2c06
- MD5 089ea57abe6e43cabf8c6c89f954f57d
- SHA1 919a540d43ee4122c8c9842e98c34a85960e865b
- SHA512 a258e6e2e6a1f113e8d6ec91b4ab684d5ba114929d11f3379f9c6b2ef3d70c45bf809dc591aa721233a665772b09f9e3ff611ab8b59878a4122906280ccdd980
- SSDEEP 768:wdiv4Kbwg2V+YV53fADYI1WQZSnqLMh0AoE7pwaambG4lRA3Sy80iLhXIgT:w+bQs0qLzECafbX3A3Sy80KpIgT
- TLSH T1BF434B083B9885ABD3ED4AB8A8F2535582B3F3631602E79E1CC451F60A137D75912EF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.