General
- Target CFB 27 RTG Editor 1.0.0.exe
- Size 87.0MB
- Sample260709-m4n2raas61
- SHA256 8b3aebb2e40d2da3b92d6d89f5a80f18312885cc5b69efb3258500051d2fe6ba
- MD5 24eb811f0208bdac4c35cfa897f75b6a
- SHA1 220c617eaf7b8008f63bde5656c152bae8ea672c
- SHA512 bf7ed94d4d1e3bbbca11046a13c345b6921f4c51e07eb73723a33c023060c688a13d5e2b2d6c0f4f949770a9e9b7ce67553b9e33d733432104bb96e68c0cd326
- SSDEEP 1572864:At9IKPNh2S57Jxx2p2RDMgPIYOMTND5fEEhlARgtx9NvZycVo+Wy7:AUKFYSJ3x2poDMhkZD5ZA+tx9dZLmXy7
- TLSH T119183309E4B4E15AB17D88F315A44120AF0A96E1EB729D4F8DF5B40036F139B5AF837E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CFB 27 RTG Editor 1.0.0.exe
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
CFB 27 RTG Editor.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target CFB 27 RTG Editor 1.0.0.exe
- Size 87.0MB
- SHA256 8b3aebb2e40d2da3b92d6d89f5a80f18312885cc5b69efb3258500051d2fe6ba
- MD5 24eb811f0208bdac4c35cfa897f75b6a
- SHA1 220c617eaf7b8008f63bde5656c152bae8ea672c
- SHA512 bf7ed94d4d1e3bbbca11046a13c345b6921f4c51e07eb73723a33c023060c688a13d5e2b2d6c0f4f949770a9e9b7ce67553b9e33d733432104bb96e68c0cd326
- SSDEEP 1572864:At9IKPNh2S57Jxx2p2RDMgPIYOMTND5fEEhlARgtx9NvZycVo+Wy7:AUKFYSJ3x2poDMhkZD5ZA+tx9dZLmXy7
- TLSH T119183309E4B4E15AB17D88F315A44120AF0A96E1EB729D4F8DF5B40036F139B5AF837E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
-
- Target CFB 27 RTG Editor.exe
- Size 180.0MB
- SHA256 a2ef496c5a9c45a1a08a9c1a86c018a52be4c79603a58fd6c56fda0430ae77cd
- MD5 2c3dffca68dd36455c732cea64163b7a
- SHA1 c115492551a83a1e9f78010a92ee8a71a2c8980a
- SHA512 ac152bf58ff58044e54f8c46bfbf8e5b4be85aedd5b83c3457a640f8c14d96f5a8f3d88a468515aa43dea82b2772441899ff35eb7386c39af41c36cc7bda600c
- SSDEEP 1572864:JH0f0gqxb0WBFh/LVO9dyKcRmAswCXj5EtV4ga5h0q2ZOADpAyK5/Y3P8kbVr+qI:+sok+hK7
- TLSH T16A988C03F39A50D9E01DD1B58B9B9633EAB1B8854324A2DF27540B512F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.