General
- Target b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
- Size 541KB
- Sample260706-j968qsct51
- SHA256 b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
- MD5 de31191a44f8fabe7c49ad6935bdd4b3
- SHA1 96915e28baf63b05b88859f1da6bc6b4f539e9be
- SHA512 98241e925032b122f38fa1c9384b7f7da1aacb407f9035102987221767864707610da54496b0967dde9daaba2317dc4fcc0e6133eafe7755ca5ba4866571ee8d
- SSDEEP 12288:hzQ+73GTthYiwEwJPFZRdIu8tAjjD6U0UCjIg1ibY6nmKd:yo3GT1wEW9WI3EIg1ibLm
- TLSH T1B5C4124B76B521EED5328239C92129A9C332F8351611DB6F07A5425B0F7F2D28D3BF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
- Size 541KB
- SHA256 b424d821f8772824e213bbf9de9e6a431ac634107020689b46995e6bcdcc6232
- MD5 de31191a44f8fabe7c49ad6935bdd4b3
- SHA1 96915e28baf63b05b88859f1da6bc6b4f539e9be
- SHA512 98241e925032b122f38fa1c9384b7f7da1aacb407f9035102987221767864707610da54496b0967dde9daaba2317dc4fcc0e6133eafe7755ca5ba4866571ee8d
- SSDEEP 12288:hzQ+73GTthYiwEwJPFZRdIu8tAjjD6U0UCjIg1ibY6nmKd:yo3GT1wEW9WI3EIg1ibLm
- TLSH T1B5C4124B76B521EED5328239C92129A9C332F8351611DB6F07A5425B0F7F2D28D3BF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext