General
- Target 034e44d31149b266f62f8f5744493f71a7b92912f9b2df82a48558febc4ce6d6
- Size 2.0MB
- Sample260715-jqfxfaas8v
- SHA256 034e44d31149b266f62f8f5744493f71a7b92912f9b2df82a48558febc4ce6d6
- MD5 efb573bae2628d0b0ac5dc1ebf9ca0f5
- SHA1 cd294d40f66b8488092238ffac9c8c6b4c773ef0
- SHA512 3479e5dc5296ded5e24def0a7494716b4385956a846eb9637dd7dfe0586bb93262a7b18e9cf4db691d15dab42c71b7dc62be8ef88f3534679543d4df8f26df66
- SSDEEP 49152:h7czX050Hnmst8yCCDMcZelr87BdVgQx5XRAggqM1o:ak50HtGCD3ep8Wk5hAggqM1o
- TLSH T120A5CF117141C035C733A5725A1EDE6284BDAE720F75858BB3CCB72A0A754C6AE3A73B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
034e44d31149b266f62f8f5744493f71a7b92912f9b2df82a48558febc4ce6d6.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
034e44d31149b266f62f8f5744493f71a7b92912f9b2df82a48558febc4ce6d6.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 034e44d31149b266f62f8f5744493f71a7b92912f9b2df82a48558febc4ce6d6
- Size 2.0MB
- SHA256 034e44d31149b266f62f8f5744493f71a7b92912f9b2df82a48558febc4ce6d6
- MD5 efb573bae2628d0b0ac5dc1ebf9ca0f5
- SHA1 cd294d40f66b8488092238ffac9c8c6b4c773ef0
- SHA512 3479e5dc5296ded5e24def0a7494716b4385956a846eb9637dd7dfe0586bb93262a7b18e9cf4db691d15dab42c71b7dc62be8ef88f3534679543d4df8f26df66
- SSDEEP 49152:h7czX050Hnmst8yCCDMcZelr87BdVgQx5XRAggqM1o:ak50HtGCD3ep8Wk5hAggqM1o
- TLSH T120A5CF117141C035C733A5725A1EDE6284BDAE720F75858BB3CCB72A0A754C6AE3A73B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.