General
- Target ef2972907f4350e8e4c1ecebc23a5a87ef69a8561ce530a43dba7e120ca665b1
- Size 1.1MB
- Sample260715-hr8heahs3x
- SHA256 ef2972907f4350e8e4c1ecebc23a5a87ef69a8561ce530a43dba7e120ca665b1
- MD5 0372aa9301cc2d048a9165c551f8fe0a
- SHA1 f6f494e928ffe44ad10b0dd231de95c44947a538
- SHA512 52927c5dc8d3220c2a27bdb2e642cd0f239ae7bc31f5b20602cd396acb5f50da66335dee5c4eb346af015b83c3c9a9c262fd5548e6bbc6cf8102b21cfe0b2f73
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnP:AylFHUv6ReIt0jSrOU
- TLSH T12D357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef2972907f4350e8e4c1ecebc23a5a87ef69a8561ce530a43dba7e120ca665b1.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef2972907f4350e8e4c1ecebc23a5a87ef69a8561ce530a43dba7e120ca665b1.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ef2972907f4350e8e4c1ecebc23a5a87ef69a8561ce530a43dba7e120ca665b1
- Size 1.1MB
- SHA256 ef2972907f4350e8e4c1ecebc23a5a87ef69a8561ce530a43dba7e120ca665b1
- MD5 0372aa9301cc2d048a9165c551f8fe0a
- SHA1 f6f494e928ffe44ad10b0dd231de95c44947a538
- SHA512 52927c5dc8d3220c2a27bdb2e642cd0f239ae7bc31f5b20602cd396acb5f50da66335dee5c4eb346af015b83c3c9a9c262fd5548e6bbc6cf8102b21cfe0b2f73
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnP:AylFHUv6ReIt0jSrOU
- TLSH T12D357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE