General
- Target fd853128b1820ca74d2dd87e4a9be5301ffe2c4c13d031f3b95047824e485507
- Size 1.6MB
- Sample260709-j56fmsfx4s
- SHA256 fd853128b1820ca74d2dd87e4a9be5301ffe2c4c13d031f3b95047824e485507
- MD5 07d7e318703cfb65455f1e8e031250fb
- SHA1 18633887855fdb3aa77f87645162224d888852b7
- SHA512 78a0c91acd54824129382c441fa160b3b786dc129430aab37c1d493e4a5b791a03398963c2298c194be9ec73a0a4f0f666d14412d6f2f04475f1f93b582604e2
- SSDEEP 12288:Uv96ddoNM5ZOAkibndkLXYqKE20sXvWKYWzc2///6CgDEi6aFHxX3ht40FgWjTbD:UF6dON0kOndk7YqGs2//W40OWTaQ
- TLSH T16E751A7F7390E229C17ED13EC1A38F05D533B0B52BB3C5EB62980A6C9A069D51E7E650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fd853128b1820ca74d2dd87e4a9be5301ffe2c4c13d031f3b95047824e485507.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd853128b1820ca74d2dd87e4a9be5301ffe2c4c13d031f3b95047824e485507.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target fd853128b1820ca74d2dd87e4a9be5301ffe2c4c13d031f3b95047824e485507
- Size 1.6MB
- SHA256 fd853128b1820ca74d2dd87e4a9be5301ffe2c4c13d031f3b95047824e485507
- MD5 07d7e318703cfb65455f1e8e031250fb
- SHA1 18633887855fdb3aa77f87645162224d888852b7
- SHA512 78a0c91acd54824129382c441fa160b3b786dc129430aab37c1d493e4a5b791a03398963c2298c194be9ec73a0a4f0f666d14412d6f2f04475f1f93b582604e2
- SSDEEP 12288:Uv96ddoNM5ZOAkibndkLXYqKE20sXvWKYWzc2///6CgDEi6aFHxX3ht40FgWjTbD:UF6dON0kOndk7YqGs2//W40OWTaQ
- TLSH T16E751A7F7390E229C17ED13EC1A38F05D533B0B52BB3C5EB62980A6C9A069D51E7E650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext