General
- Target 9ddebf0b525007e1039d6c30c6ae3253969dcb00df489d8faf4b35c496e3cb43
- Size 1.6MB
- Sample260708-evpmxsaw71
- SHA256 9ddebf0b525007e1039d6c30c6ae3253969dcb00df489d8faf4b35c496e3cb43
- MD5 7980ea99eb4321525dd09475b836e543
- SHA1 a21d4e67ac51a88ed158ff63a97d67f2d29bc39b
- SHA512 2819c737ba50a139dfa635127af103028ed832291b2dae43b32c3eafa895a3c273868a58fa2db952afc748cfb2b2bb656f1872d80f4f1ce814075500552b1e8c
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQf8:AylFHUv6ReIt0jSrOA88g8
- TLSH T1EC758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9ddebf0b525007e1039d6c30c6ae3253969dcb00df489d8faf4b35c496e3cb43.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ddebf0b525007e1039d6c30c6ae3253969dcb00df489d8faf4b35c496e3cb43.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 9ddebf0b525007e1039d6c30c6ae3253969dcb00df489d8faf4b35c496e3cb43
- Size 1.6MB
- SHA256 9ddebf0b525007e1039d6c30c6ae3253969dcb00df489d8faf4b35c496e3cb43
- MD5 7980ea99eb4321525dd09475b836e543
- SHA1 a21d4e67ac51a88ed158ff63a97d67f2d29bc39b
- SHA512 2819c737ba50a139dfa635127af103028ed832291b2dae43b32c3eafa895a3c273868a58fa2db952afc748cfb2b2bb656f1872d80f4f1ce814075500552b1e8c
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQf8:AylFHUv6ReIt0jSrOA88g8
- TLSH T1EC758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE