General
- Target Vison free.exe
- Size 3.1MB
- Sample260710-essxkacy5p
- SHA256 87acb5b05dcb0b5008ec2923c625138f6ca85e98e718633c4f8679cc60f66b06
- MD5 ca3ac718e1b60b86c79273404f8d940c
- SHA1 d6573b59aafefbabfb7c77c577a684d8dda6950a
- SHA512 dd4225bd54e80f950a27ee089767980eec953600734fe4f28d743e760724a86a6bfbb815fbae0f0ab70f1a726973ceb19a4d68a740c27c60fe2190199b860888
- SSDEEP 49152:7c+gP0wH1Hixws6wdpOZv95Sj0Wfc/w9KOMYfjkNAxrY0EjBqz6MG9V:7cc28ddk5k0Wrwl
- TLSH T185E5018E6ED69CFFA844D13C5BC81DB131E9EC21382092F51DE0269F5B8177E7184AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vison free.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Vison free.exe
- Size 3.1MB
- SHA256 87acb5b05dcb0b5008ec2923c625138f6ca85e98e718633c4f8679cc60f66b06
- MD5 ca3ac718e1b60b86c79273404f8d940c
- SHA1 d6573b59aafefbabfb7c77c577a684d8dda6950a
- SHA512 dd4225bd54e80f950a27ee089767980eec953600734fe4f28d743e760724a86a6bfbb815fbae0f0ab70f1a726973ceb19a4d68a740c27c60fe2190199b860888
- SSDEEP 49152:7c+gP0wH1Hixws6wdpOZv95Sj0Wfc/w9KOMYfjkNAxrY0EjBqz6MG9V:7cc28ddk5k0Wrwl
- TLSH T185E5018E6ED69CFFA844D13C5BC81DB131E9EC21382092F51DE0269F5B8177E7184AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.