General
- Target cyberware.exe
- Size 702KB
- Sample260710-hsnvdsgs8x
- SHA256 fff5d0db5cedccee07660c8a70cd3564e45a2447acf0815fe1c53ae3b5baf2bd
- MD5 dad94ee98ee8a0645977dada4e01bea5
- SHA1 dee1a9ef6685bc74140803cf16243d48315b9d38
- SHA512 d07b38e49df8e16e9c1638fd1b16be5e101c7bcf59155f48fe96169aa95cceecda1300bb0161012aed70fcd01284b5b702356f34e3a459ed44e8b04dbbc53449
- SSDEEP 6144:cWWTueknEdkQYe18kk9PgzH4Z1AO2fPW8TZcSX+hJPbVc+GwC5j/A:DWT3eskQYgVH4ZA+8TJOrzhQY
- TLSH T195E4C0A27744CC4AE52553F74823CD7907263EB97932951360FBBE3FBAB62930C52186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cyberware.exe
Resource
win10ltsc2021-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target cyberware.exe
- Size 702KB
- SHA256 fff5d0db5cedccee07660c8a70cd3564e45a2447acf0815fe1c53ae3b5baf2bd
- MD5 dad94ee98ee8a0645977dada4e01bea5
- SHA1 dee1a9ef6685bc74140803cf16243d48315b9d38
- SHA512 d07b38e49df8e16e9c1638fd1b16be5e101c7bcf59155f48fe96169aa95cceecda1300bb0161012aed70fcd01284b5b702356f34e3a459ed44e8b04dbbc53449
- SSDEEP 6144:cWWTueknEdkQYe18kk9PgzH4Z1AO2fPW8TZcSX+hJPbVc+GwC5j/A:DWT3eskQYgVH4ZA+8TJOrzhQY
- TLSH T195E4C0A27744CC4AE52553F74823CD7907263EB97932951360FBBE3FBAB62930C52186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application