General
- Target 397096ea7bfde8050b70130814a88c4fde17e91c282a718ef10a40e83f5c05c0
- Size 3.5MB
- Sample260719-3eae3afx7r
- SHA256 397096ea7bfde8050b70130814a88c4fde17e91c282a718ef10a40e83f5c05c0
- MD5 c3ffaf883de0144ab8b9291f8146f7cb
- SHA1 430d06ae2765bd403a9575cdf1b7d6362b161bc8
- SHA512 fac30fbcd0408a61b7d84baccdb5c81b398a8002ce07615db182b1854f177245194ff4b10c30fda6b7d6d26d37e1f79e498f5248be061e901cf6f49ccae52d6a
- SSDEEP 98304:lk6cAxd+44hn394CSegSm957++FhBpPn+eH:Kixd+44tZLgJ9157HPnR
- TLSH T189063336893C8A10D3B970F5F4E6D9B8D9BC03C5B22AC96D7C90118A5DCFF89A16365C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
397096ea7bfde8050b70130814a88c4fde17e91c282a718ef10a40e83f5c05c0.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
397096ea7bfde8050b70130814a88c4fde17e91c282a718ef10a40e83f5c05c0.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 397096ea7bfde8050b70130814a88c4fde17e91c282a718ef10a40e83f5c05c0
- Size 3.5MB
- SHA256 397096ea7bfde8050b70130814a88c4fde17e91c282a718ef10a40e83f5c05c0
- MD5 c3ffaf883de0144ab8b9291f8146f7cb
- SHA1 430d06ae2765bd403a9575cdf1b7d6362b161bc8
- SHA512 fac30fbcd0408a61b7d84baccdb5c81b398a8002ce07615db182b1854f177245194ff4b10c30fda6b7d6d26d37e1f79e498f5248be061e901cf6f49ccae52d6a
- SSDEEP 98304:lk6cAxd+44hn394CSegSm957++FhBpPn+eH:Kixd+44tZLgJ9157HPnR
- TLSH T189063336893C8A10D3B970F5F4E6D9B8D9BC03C5B22AC96D7C90118A5DCFF89A16365C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext