General
- Target promo checker.7z
- Size 12.9MB
- Sample260714-m2ltlsa15p
- SHA256 b51e11505fc357b45e1b0b47a43b84706ae5d3ea4a0b9b37631008bc147c35ff
- MD5 c81b86c4db73af586be5cb4f4e2a76ec
- SHA1 8c98eb54f43b855406c3e00fa7bdfa148de8851c
- SHA512 31cba585dba919f330018d4fc7565e89494e0e9a2d5cf6e075ae6a9dd21a7e664aacae547885999c2a43497a812d74c9287e4b3e715b2377645f60eb3a45db77
- SSDEEP 196608:ciRQJ6IPLipcE6NvoWjUbnVa8hQQ6jm1+/oPWMfQtiXHOcqv8uMHCHFnJOR/9Vyz:ciRA1PWcPWa8hXDAxq0yucagCHFn29E
- TLSH T16DD6330E3911E98A0F180C4FB8ADDB5CA16F15FAA60F1374B76475AE3C24F429DA217D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
promo checker.7z
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
promo checker.7z
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target promo checker.7z
- Size 12.9MB
- SHA256 b51e11505fc357b45e1b0b47a43b84706ae5d3ea4a0b9b37631008bc147c35ff
- MD5 c81b86c4db73af586be5cb4f4e2a76ec
- SHA1 8c98eb54f43b855406c3e00fa7bdfa148de8851c
- SHA512 31cba585dba919f330018d4fc7565e89494e0e9a2d5cf6e075ae6a9dd21a7e664aacae547885999c2a43497a812d74c9287e4b3e715b2377645f60eb3a45db77
- SSDEEP 196608:ciRQJ6IPLipcE6NvoWjUbnVa8hQQ6jm1+/oPWMfQtiXHOcqv8uMHCHFnJOR/9Vyz:ciRA1PWcPWa8hXDAxq0yucagCHFn29E
- TLSH T16DD6330E3911E98A0F180C4FB8ADDB5CA16F15FAA60F1374B76475AE3C24F429DA217D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers new Windows logon scripts automatically executed at logon.