General
- Target ExpectionalLauncher.exe
- Size 39KB
- Sample260710-164f4scv2m
- SHA256 c00acef5a4a58fc0e2eef68f361769ee8168f9beed24d08411324ac3fad31647
- MD5 7e20bc32cab8db8535160932a65f8c33
- SHA1 3b261014c832129c94a6a1266634765b36eece71
- SHA512 d2823b9ad212056840ac044d5cf75deb022f98b414bd327706670b83a9780eb582fdc655b82adbd8b3c04c0de93b8eee608d60dfe4c217800ceffc61dea39088
- SSDEEP 384:vCfwoDeCJ8/u0gxQpzCPxK+K60Q384aosMBicbeRRuZoijtBKYkOlCtNRuZoijt:vp69QpadK6R8rJgR+JmG9Zl7b9zN
- TLSH T14703B616CD66E16FD35E8D78CA174C45EE62BC8ACBD1B5CF6B400DE60961A90AF3D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExpectionalLauncher.exe
Resource
win10v2004-20260513-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target ExpectionalLauncher.exe
- Size 39KB
- SHA256 c00acef5a4a58fc0e2eef68f361769ee8168f9beed24d08411324ac3fad31647
- MD5 7e20bc32cab8db8535160932a65f8c33
- SHA1 3b261014c832129c94a6a1266634765b36eece71
- SHA512 d2823b9ad212056840ac044d5cf75deb022f98b414bd327706670b83a9780eb582fdc655b82adbd8b3c04c0de93b8eee608d60dfe4c217800ceffc61dea39088
- SSDEEP 384:vCfwoDeCJ8/u0gxQpzCPxK+K60Q384aosMBicbeRRuZoijtBKYkOlCtNRuZoijt:vp69QpadK6R8rJgR+JmG9Zl7b9zN
- TLSH T14703B616CD66E16FD35E8D78CA174C45EE62BC8ACBD1B5CF6B400DE60961A90AF3D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE