General
- Target winrar-x64-723 (1).exe
- Size 3.6MB
- Sample260712-q3b8caaz6m
- SHA256 0ed637a7897aaf428e9f5a6a8535fec28c1828796782baf0e4ea452b0cbe4f27
- MD5 755aaa712fe1362529b3b7f90952b2c4
- SHA1 fff6804c26e4ac3364707669e00f183a1c95b16a
- SHA512 886a7220c940fc5fadc132eefb061ea028c0457967ad540bb5f9f8c3737fbf41ca35b3bdcccd0fbb2ebd5c32335e22c33b99a91ac9dd75b0d19e29bddcd04af1
- SSDEEP 98304:yqBAcxnA0Xic3WZnUQm23BOtkQK0Kor5RiFBZ3ABSU:HxA0Xic3W1UQm4OGQK0SBZ3ABSU
- TLSH T1FD06231DE79514F5E277E138C9620207EAB27CA98370978F23E914962F373A05E3DB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
winrar-x64-723 (1).exe
Resource
win10ltsc2021-20260513-en
11 signatures
60 seconds
Malware Config
Targets
-
- Target winrar-x64-723 (1).exe
- Size 3.6MB
- SHA256 0ed637a7897aaf428e9f5a6a8535fec28c1828796782baf0e4ea452b0cbe4f27
- MD5 755aaa712fe1362529b3b7f90952b2c4
- SHA1 fff6804c26e4ac3364707669e00f183a1c95b16a
- SHA512 886a7220c940fc5fadc132eefb061ea028c0457967ad540bb5f9f8c3737fbf41ca35b3bdcccd0fbb2ebd5c32335e22c33b99a91ac9dd75b0d19e29bddcd04af1
- SSDEEP 98304:yqBAcxnA0Xic3WZnUQm23BOtkQK0Kor5RiFBZ3ABSU:HxA0Xic3W1UQm4OGQK0SBZ3ABSU
- TLSH T1FD06231DE79514F5E277E138C9620207EAB27CA98370978F23E914962F373A05E3DB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.