General
- Target modem600.exe
- Size 814KB
- Sample260718-pgn5cabt2p
- SHA256 9c3786a7932f8df1c7a9966c41e50cafa78cfb41c84a0c4b99fe4cfc6fc25b67
- MD5 ed55da4e45acd86f1853cb1fc6b8dbd2
- SHA1 1f1ea6cda5787ed472f75fa634a73dbe291209c6
- SHA512 47bcf66b48efcecd47f87233a80aab22bf0a240805d49d7ff2ae22ee3969c6e17fb6b3b13b19cb096e4ef5186a7bd936de84607fea8503ff8f5911337b4ff323
- SSDEEP 24576:pzXyj/2fQUjW+rBkjk69l20DtlDxP+X3Ot5QlPRsHiP:SPe1qk6+0DtlkX3OtCwCP
- TLSH T1760523A5D6C5F2B6D8894C398E2EFB3982FEE8357585C093A45C390CCC2A9D5987530F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
modem600.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
modem600.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target modem600.exe
- Size 814KB
- SHA256 9c3786a7932f8df1c7a9966c41e50cafa78cfb41c84a0c4b99fe4cfc6fc25b67
- MD5 ed55da4e45acd86f1853cb1fc6b8dbd2
- SHA1 1f1ea6cda5787ed472f75fa634a73dbe291209c6
- SHA512 47bcf66b48efcecd47f87233a80aab22bf0a240805d49d7ff2ae22ee3969c6e17fb6b3b13b19cb096e4ef5186a7bd936de84607fea8503ff8f5911337b4ff323
- SSDEEP 24576:pzXyj/2fQUjW+rBkjk69l20DtlDxP+X3Ot5QlPRsHiP:SPe1qk6+0DtlkX3OtCwCP
- TLSH T1760523A5D6C5F2B6D8894C398E2EFB3982FEE8357585C093A45C390CCC2A9D5987530F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE