General
- Target e757bf4b8c719fb45819a100451f4c0bb93279c9151368a60f8a1b41c5b7f1d7
- Size 11.7MB
- Sample260712-swtj6acs6r
- SHA256 e757bf4b8c719fb45819a100451f4c0bb93279c9151368a60f8a1b41c5b7f1d7
- MD5 c52b53dfc494269eb8806abe20b7b8bb
- SHA1 40adc75cdc3a87e34524daa05e849d248f45e5f7
- SHA512 b11aacbbf41bbb496ff0a72cef0e3d2cc6be292df3b041f966feb3b38e70eac33cb168feee01ef861342c3f6e5b3d7c3bb404c87e07a6e786338b27ad6a6078d
- SSDEEP 196608:2tapeiisfJpLcJUbJiCQiOJxuSdB+vl6nWLJlKvLydYnDfVyKbGjw6nMaSggT1Ht:28iocJ8QiOJxXw6nWLJlKvLydUDkKbKo
- TLSH T1D6C633C4FA7F50F625EBB39DB62A215756E96C0C03FD570F21898F090B149CC8C5AE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SmartCardLogonsetupX32.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SmartCardLogonsetupX32.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
SmartCardLogonsetupX64.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
SmartCardLogonsetupX64.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SmartCardLogonsetupX32.exe
- Size 5.3MB
- SHA256 6ce3a7724b80cf963005355745fe1fa3f9ade1f16d5cd26b156d9daffc90e92b
- MD5 7641be83f0cf3d0b131dc0d665350f06
- SHA1 0ca7f4ae14a197a986880b319fc951b73eae6174
- SHA512 65c5e5c8bf8d55fc7de864382aea505dfc842b27899ee99d1f10c29286f0024678e49e15a1c1b0e948127decbde48cd99bb762e7ce1cdd8e89315548931db995
- SSDEEP 98304:O06FOznLo0+Dd6uxcLP5Oo2z5zxE3L+5m9LwXTtigLnjw7ZnC5JFXVDYA:O3F6n80W6uGLP53Yz8LQsEiyJzYA
- TLSH T118463382F392C0F1D1AA01F9453587B64FB57D3143BAC9E76BD07D1E4E306D0AA36A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target SmartCardLogonsetupX64.exe
- Size 9.6MB
- SHA256 6340c69dff986167e81a93aca7abc441d73f1fdb460c7ebbf53744a073155757
- MD5 240bf6419f155c93131e20eed9497999
- SHA1 e41e56783c1099839f5cdbbde527a1ea15e2a75f
- SHA512 936af4e0c53af1b325d63e1c5d8bfd4873bea39bfd84cafbb690cd02908999087134bcd02f2fe179db36b59ae667822668788d0024e28c6dd7f7aaeead1ba601
- SSDEEP 98304:0PZYxnMe4V/cJtKpGvJc5twG9Nh0axFsYYwine9jnuceWIta5m9LwXTtigLnjw7T:dxMe4cxhARsYhinEMLMsEiyJ7zV/w+A
- TLSH T135A6CF5566F840E9D0BEC139C9828A4BD2F278450B35C7CF40A45AAE1F377E24D2EF66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL