General
- Target download
- Size 561KB
- Sample260710-zsys2acw4z
- SHA256 fdf05d78bcce69471bd027e19d0eb55b9f2d4b092971182405144991ce7763d4
- MD5 5bd093493e442a536f70823cef868e80
- SHA1 3945c0f7d5a4d7638739bbf6e6c6b5003e8320b6
- SHA512 c01754ebdbc4425890d4afa076cbd1a434aeb8b252de839746fc6cda71a986a7e7c8b0e44107a7f5f62268b16c79c0fabe8ae7fa86fa1ad9d7864917cc36fdae
- SSDEEP 3072:MLLMIgJ0bLMIgJ0UhVHoyoQe9v899GMnhnkhFHLMIgJ0bLMIgJ0UhVHoyoQe9v8/:MwDDpf16EXDhkT8DDpf16EXDhkTA
- TLSH T196C4E9F1A130C26FD42786C967B9EF5E6087F295EF639984D6AC92516BCFC60FD00488
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
download.html
Resource
win10v2004-20260513-en
24 signatures
900 seconds
Behavioral task
behavioral2
Sample
download.html
Resource
win11ltsc2024-20260709-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target download
- Size 561KB
- SHA256 fdf05d78bcce69471bd027e19d0eb55b9f2d4b092971182405144991ce7763d4
- MD5 5bd093493e442a536f70823cef868e80
- SHA1 3945c0f7d5a4d7638739bbf6e6c6b5003e8320b6
- SHA512 c01754ebdbc4425890d4afa076cbd1a434aeb8b252de839746fc6cda71a986a7e7c8b0e44107a7f5f62268b16c79c0fabe8ae7fa86fa1ad9d7864917cc36fdae
- SSDEEP 3072:MLLMIgJ0bLMIgJ0UhVHoyoQe9v899GMnhnkhFHLMIgJ0bLMIgJ0UhVHoyoQe9v8/:MwDDpf16EXDhkT8DDpf16EXDhkTA
- TLSH T196C4E9F1A130C26FD42786C967B9EF5E6087F295EF639984D6AC92516BCFC60FD00488
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.