General
- Target e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
- Size 3.2MB
- Sample260714-mkcjlsdt3w
- SHA256 e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
- MD5 4a1aad9120a0f126093d5835392a161c
- SHA1 9ca04919ba9d85580b534ff3ba3ea56088865944
- SHA512 65e95b4aa92db6c2475b3468f1b34430172233762e597a66123833b3a414eca2806700c33931da17412443113d4fdf7f746e358a88ddc2e9334fa938cef91ea3
- SSDEEP 24576:ki1U2UxAPqGcv/+Duyx4UzIPPGKaG6u7h37UdTyLMb1VfNcPF3xLQb4BB9LvSwFy:kS8qPRcvE4GK3xAd7Vlcz8QCBC+SBsx
- TLSH T198E5EF2E1DC304A4C6998E74E3F918EC22F0862B9156B7BB699913F8CF0175F39174A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
- Size 3.2MB
- SHA256 e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
- MD5 4a1aad9120a0f126093d5835392a161c
- SHA1 9ca04919ba9d85580b534ff3ba3ea56088865944
- SHA512 65e95b4aa92db6c2475b3468f1b34430172233762e597a66123833b3a414eca2806700c33931da17412443113d4fdf7f746e358a88ddc2e9334fa938cef91ea3
- SSDEEP 24576:ki1U2UxAPqGcv/+Duyx4UzIPPGKaG6u7h37UdTyLMb1VfNcPF3xLQb4BB9LvSwFy:kS8qPRcvE4GK3xAd7Vlcz8QCBC+SBsx
- TLSH T198E5EF2E1DC304A4C6998E74E3F918EC22F0862B9156B7BB699913F8CF0175F39174A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE