General
- Target c6e9d4f2504f7e9736a9a36b2cef3a46d5ec6d8c96786c8e1783fb0f72fd115b
- Size 69KB
- Sample260719-3tchzagy4j
- SHA256 c6e9d4f2504f7e9736a9a36b2cef3a46d5ec6d8c96786c8e1783fb0f72fd115b
- MD5 181347763d391e503a7b0023bd1bc9df
- SHA1 d7d02be582a7d5cf0d70cf5d52ae21e638b27d51
- SHA512 70a5e9c6abd24896d41bea1b4d9b55380ff369201f9da40c3b38699d06191542c352d23e7b09738d41f67684f175dd4f1e6a8f0de858037193d42f2669451bdf
- SSDEEP 1536:sBoyi12Nxvxt62Mi02bauRZHI5QCEq1LsNfyi:sTVvxt62Mi02bLSxEr
- TLSH T10F633E89FB8646E9C962D036D7A15635E1757CA44F74E3FB9F408E360D63AE0BD3A200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c6e9d4f2504f7e9736a9a36b2cef3a46d5ec6d8c96786c8e1783fb0f72fd115b.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c6e9d4f2504f7e9736a9a36b2cef3a46d5ec6d8c96786c8e1783fb0f72fd115b.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target c6e9d4f2504f7e9736a9a36b2cef3a46d5ec6d8c96786c8e1783fb0f72fd115b
- Size 69KB
- SHA256 c6e9d4f2504f7e9736a9a36b2cef3a46d5ec6d8c96786c8e1783fb0f72fd115b
- MD5 181347763d391e503a7b0023bd1bc9df
- SHA1 d7d02be582a7d5cf0d70cf5d52ae21e638b27d51
- SHA512 70a5e9c6abd24896d41bea1b4d9b55380ff369201f9da40c3b38699d06191542c352d23e7b09738d41f67684f175dd4f1e6a8f0de858037193d42f2669451bdf
- SSDEEP 1536:sBoyi12Nxvxt62Mi02bauRZHI5QCEq1LsNfyi:sTVvxt62Mi02bLSxEr
- TLSH T10F633E89FB8646E9C962D036D7A15635E1757CA44F74E3FB9F408E360D63AE0BD3A200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger