General
- Target Xfer.Records.Serum.2.v2.0.24b-V.R,TCD.exe
- Size 18.1MB
- Sample260716-dnnllsb12r
- SHA256 a5c63d3c54501b445314af1234d28208a9c31a0eca36171a6652e5dcbb39771f
- MD5 dc78074dde85cc313ce5dfbc68437cd0
- SHA1 aa384a9fb1bff1fed2f96922a60508328684f359
- SHA512 7f333c51b3ff22d94a65afcf0e4dbf3efd93967dc848d6cb49594062a11bcf061f6f1a0c2be59b926b5ef2643b585a6dd5c8fc36767bd25400cdfb7c75a0ae0b
- SSDEEP 393216:42cRymoUcwiEjPbjDaotchI2P4ZGyF67n4JwspYz4LNJPmo0NzCcB:7cDti5yF67Kws9LX8BCE
- TLSH T135173333B28A233EF46A5A375AB682205D7B2A21A55B8C06D6F44C4CCF1E5B01D7F747
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Xfer.Records.Serum.2.v2.0.24b-V.R,TCD.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Xfer.Records.Serum.2.v2.0.24b-V.R,TCD.exe
- Size 18.1MB
- SHA256 a5c63d3c54501b445314af1234d28208a9c31a0eca36171a6652e5dcbb39771f
- MD5 dc78074dde85cc313ce5dfbc68437cd0
- SHA1 aa384a9fb1bff1fed2f96922a60508328684f359
- SHA512 7f333c51b3ff22d94a65afcf0e4dbf3efd93967dc848d6cb49594062a11bcf061f6f1a0c2be59b926b5ef2643b585a6dd5c8fc36767bd25400cdfb7c75a0ae0b
- SSDEEP 393216:42cRymoUcwiEjPbjDaotchI2P4ZGyF67n4JwspYz4LNJPmo0NzCcB:7cDti5yF67Kws9LX8BCE
- TLSH T135173333B28A233EF46A5A375AB682205D7B2A21A55B8C06D6F44C4CCF1E5B01D7F747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL