General
- Target WinSpv.exe
- Size 267KB
- Sample260709-mk7pragx5k
- SHA256 61c550fb2af913fecf47d329fd57202f45d04169b1a27d6197f543ba4e23220c
- MD5 28dc4b818a77b25c7ee5e926bf5cdf37
- SHA1 7cea3ef9842b477a071a37dbc6bcf20ff63a10f7
- SHA512 8cded761ca4fbf7c7651c3df66891fea470c8ce6f482a68eade075a188fcc2febcfe4cf69304b6498b564d3c549b9aaecacdc7026fe8c496a2b5cb1ab3e9905e
- SSDEEP 6144:nldk1cWQRNTBXQmACZLraWKtU9y00Nrkk+gFeSuS:ncv0NTJkpF1J
- TLSH T19A442684F781416EC7E306B216F3D237E23B6E14763084A6B6DCBF17F57258679242A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinSpv.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinSpv.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target WinSpv.exe
- Size 267KB
- SHA256 61c550fb2af913fecf47d329fd57202f45d04169b1a27d6197f543ba4e23220c
- MD5 28dc4b818a77b25c7ee5e926bf5cdf37
- SHA1 7cea3ef9842b477a071a37dbc6bcf20ff63a10f7
- SHA512 8cded761ca4fbf7c7651c3df66891fea470c8ce6f482a68eade075a188fcc2febcfe4cf69304b6498b564d3c549b9aaecacdc7026fe8c496a2b5cb1ab3e9905e
- SSDEEP 6144:nldk1cWQRNTBXQmACZLraWKtU9y00Nrkk+gFeSuS:ncv0NTJkpF1J
- TLSH T19A442684F781416EC7E306B216F3D237E23B6E14763084A6B6DCBF17F57258679242A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.