General
- Target ef6b93a756df4c3e5ad0a51b9b6834b8e2754027986fec3bfe806040b1c1769b
- Size 3.0MB
- Sample260709-mcwbragv5r
- SHA256 ef6b93a756df4c3e5ad0a51b9b6834b8e2754027986fec3bfe806040b1c1769b
- MD5 198cae253229fab020b082e181c067e7
- SHA1 5f746fb4828fd28da10cb66443f57cd243a7ee55
- SHA512 628b6b7f583a4759bd26c1c93dc07464f828c1d226caae21934ae69a1c84a551752c2c98dca29b629a6457b014cf47da19f1747d270cc3f4d2262b8f3e02db74
- SSDEEP 49152:yv/1RDPJJb0VCJGR6qSV7MFQf+KKIvVU0N+BdhWI5swVwQeD5w+fu0TnKc:yv/1RDPSOVQ2dKqVfihWI5fKDa+fn
- TLSH T12BE58D319651C136D86F02F1A63D9E6B591FAFB80BB054C7A3C8BA6D6D704C32336A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef6b93a756df4c3e5ad0a51b9b6834b8e2754027986fec3bfe806040b1c1769b.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef6b93a756df4c3e5ad0a51b9b6834b8e2754027986fec3bfe806040b1c1769b.dll
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ef6b93a756df4c3e5ad0a51b9b6834b8e2754027986fec3bfe806040b1c1769b
- Size 3.0MB
- SHA256 ef6b93a756df4c3e5ad0a51b9b6834b8e2754027986fec3bfe806040b1c1769b
- MD5 198cae253229fab020b082e181c067e7
- SHA1 5f746fb4828fd28da10cb66443f57cd243a7ee55
- SHA512 628b6b7f583a4759bd26c1c93dc07464f828c1d226caae21934ae69a1c84a551752c2c98dca29b629a6457b014cf47da19f1747d270cc3f4d2262b8f3e02db74
- SSDEEP 49152:yv/1RDPJJb0VCJGR6qSV7MFQf+KKIvVU0N+BdhWI5swVwQeD5w+fu0TnKc:yv/1RDPSOVQ2dKqVfihWI5fKDa+fn
- TLSH T12BE58D319651C136D86F02F1A63D9E6B591FAFB80BB054C7A3C8BA6D6D704C32336A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.