General
- Target ledgerlive.rar
- Size 157.4MB
- Sample260711-ldql8ag19v
- SHA256 7f5ee2df5c1806ffd47b3c0a4d886b86c9f50faccb8a2837dad599cf83d49cdc
- MD5 3b26220bd852ff9e4a1e7f3f9229e774
- SHA1 da648a967d6840cd18a639fa64f463dbd3b7caf4
- SHA512 1ababf557b07ad9cec8c00a333ec0f8ea81cec6b2f55de4eda108ba19818dd6c0eca412446ef6806e03f618373bb2d87b0810d8f1e12acfa1133abd125ae1441
- SSDEEP 3145728:4e8y66vt7g2sAHRD3bW6VCkWdmnEeROBS8hGxpyLlw6UMQ5ie5LOF:4vpafdlJlEmdRqGxpyLlwkQEQLY
- TLSH T100783359C3B4FC315E701398CF7CDF58159BEC4102BFD3A6CA432608D6CAA56D2AE52A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ledgerlive.rar
Resource
win10v2004-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral2
Sample
ledgerlive.rar
Resource
win10ltsc2021-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral3
Sample
ledgerlive.rar
Resource
win11-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral4
Sample
ledgerlive.rar
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target ledgerlive.rar
- Size 157.4MB
- SHA256 7f5ee2df5c1806ffd47b3c0a4d886b86c9f50faccb8a2837dad599cf83d49cdc
- MD5 3b26220bd852ff9e4a1e7f3f9229e774
- SHA1 da648a967d6840cd18a639fa64f463dbd3b7caf4
- SHA512 1ababf557b07ad9cec8c00a333ec0f8ea81cec6b2f55de4eda108ba19818dd6c0eca412446ef6806e03f618373bb2d87b0810d8f1e12acfa1133abd125ae1441
- SSDEEP 3145728:4e8y66vt7g2sAHRD3bW6VCkWdmnEeROBS8hGxpyLlw6UMQ5ie5LOF:4vpafdlJlEmdRqGxpyLlwkQEQLY
- TLSH T100783359C3B4FC315E701398CF7CDF58159BEC4102BFD3A6CA432608D6CAA56D2AE52A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL