General
- Target c57df8a6b16b2672abd76e9cf13fe7aa5626e1048c7a08761b858d37c603d10a
- Size 2.2MB
- Sample260711-k58rfagy9z
- SHA256 c57df8a6b16b2672abd76e9cf13fe7aa5626e1048c7a08761b858d37c603d10a
- MD5 3d67cc408cfcee2fa49f63ae041a4758
- SHA1 4980a6bb714ea15ef7297b107985ee7f9c024502
- SHA512 1c2fa2402f73fc43352fa530117e31dc89faaa51647157f0aa0124c8db23cd7f380372e319c489a3e54925c3db2b3f0b93e501befc795fc16e2fdc550ced6a6d
- SSDEEP 24576:hDb2T/6NB9Pc55ZyfMA3eLIBoI9wkUNdrGIpxEu8OC+L9l1RzV8E6UpyQTllN4tA:hDzZBwkUBxEJcFPbqTiD
- TLSH T12AB56B13E54388B7C187257009F34B3BA9B547712E35C6A3A7E0EDB57E72132AA162CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c57df8a6b16b2672abd76e9cf13fe7aa5626e1048c7a08761b858d37c603d10a.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
c57df8a6b16b2672abd76e9cf13fe7aa5626e1048c7a08761b858d37c603d10a.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target c57df8a6b16b2672abd76e9cf13fe7aa5626e1048c7a08761b858d37c603d10a
- Size 2.2MB
- SHA256 c57df8a6b16b2672abd76e9cf13fe7aa5626e1048c7a08761b858d37c603d10a
- MD5 3d67cc408cfcee2fa49f63ae041a4758
- SHA1 4980a6bb714ea15ef7297b107985ee7f9c024502
- SHA512 1c2fa2402f73fc43352fa530117e31dc89faaa51647157f0aa0124c8db23cd7f380372e319c489a3e54925c3db2b3f0b93e501befc795fc16e2fdc550ced6a6d
- SSDEEP 24576:hDb2T/6NB9Pc55ZyfMA3eLIBoI9wkUNdrGIpxEu8OC+L9l1RzV8E6UpyQTllN4tA:hDzZBwkUBxEJcFPbqTiD
- TLSH T12AB56B13E54388B7C187257009F34B3BA9B547712E35C6A3A7E0EDB57E72132AA162CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application