General
- Target 2026-07-18_f8940a5c1b4aa540133c924964cee12d_
- Size 1.8MB
- Sample260718-a1pgwsew4v
- SHA256 e25f9e132406b6530394c0ec2e96c4955f082cf12dda2fe4db11ba645b7d7116
- MD5 f8940a5c1b4aa540133c924964cee12d
- SHA1 887d8f74d9f7862de11222c067797a615a3bfc66
- SHA512 256c2ad2616149c61b88a8182ac5e00a46e602fa52315b0488f4e449b89cca7151d4bd5371153841f85f7a499fee4b458bb9dceb908dc59b1358d60378e74963
- SSDEEP 24576:z0bdXff31XbTuKGanvmKveceTUM7oW8JsU3Aot+Ec0xMkWd0MIGkAjE:z8dXff313uKGanTeceojEd0MIGkAjE
- TLSH T12D95FA83BACB4EE6CEC667B496D343316378FD518B1A5F2F6608C2316D536C5AD4AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_f8940a5c1b4aa540133c924964cee12d_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_f8940a5c1b4aa540133c924964cee12d_.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_f8940a5c1b4aa540133c924964cee12d_
- Size 1.8MB
- SHA256 e25f9e132406b6530394c0ec2e96c4955f082cf12dda2fe4db11ba645b7d7116
- MD5 f8940a5c1b4aa540133c924964cee12d
- SHA1 887d8f74d9f7862de11222c067797a615a3bfc66
- SHA512 256c2ad2616149c61b88a8182ac5e00a46e602fa52315b0488f4e449b89cca7151d4bd5371153841f85f7a499fee4b458bb9dceb908dc59b1358d60378e74963
- SSDEEP 24576:z0bdXff31XbTuKGanvmKveceTUM7oW8JsU3Aot+Ec0xMkWd0MIGkAjE:z8dXff313uKGanTeceojEd0MIGkAjE
- TLSH T12D95FA83BACB4EE6CEC667B496D343316378FD518B1A5F2F6608C2316D536C5AD4AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Executes a VBScript file via the Windows Script Host.