General
- Target PotassiumX.sfx.exe
- Size 449KB
- Sample260710-1ej86aax2n
- SHA256 b17be2c8e909eb54f6c8df2749e5e55d098c2ed4197dfdffd4fa65a0b8e7a5f4
- MD5 e987cf2788d251e4204ce1391ea3259d
- SHA1 fa69e8b0ab9d1655a379e11dddea843daefe6d5d
- SHA512 ae440d4f85c7f2bd8d43bec8a2c27f9a6d6a29cd81929ad31d507d24e21ed01d361e5a4ccd3942b07f0e83df1169067c70f1fb9710c29599f6261dfe78d32dc9
- SSDEEP 6144:Sae7jdQz2diwcIXMRxHHbh43He6iU8msBcywGRYQ9RARc/1wKH3l+/XRne:qmiMZvN43+u85Bpw+YMRkc9Bo/XRne
- TLSH T1E7A46C19D7E405F9E0B7E578CD938922EB767C494761E68F03E49DA32F232908D39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PotassiumX.sfx.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
PotassiumX.sfx.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target PotassiumX.sfx.exe
- Size 449KB
- SHA256 b17be2c8e909eb54f6c8df2749e5e55d098c2ed4197dfdffd4fa65a0b8e7a5f4
- MD5 e987cf2788d251e4204ce1391ea3259d
- SHA1 fa69e8b0ab9d1655a379e11dddea843daefe6d5d
- SHA512 ae440d4f85c7f2bd8d43bec8a2c27f9a6d6a29cd81929ad31d507d24e21ed01d361e5a4ccd3942b07f0e83df1169067c70f1fb9710c29599f6261dfe78d32dc9
- SSDEEP 6144:Sae7jdQz2diwcIXMRxHHbh43He6iU8msBcywGRYQ9RARc/1wKH3l+/XRne:qmiMZvN43+u85Bpw+YMRkc9Bo/XRne
- TLSH T1E7A46C19D7E405F9E0B7E578CD938922EB767C494761E68F03E49DA32F232908D39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE