General
- Target yuanbao.exe
- Size 21.8MB
- Sample260720-2k8dlsh121
- SHA256 bca78e472cdf94c16fd67cdf2894d7286c17b370007878b988b9a9f9705f99d5
- MD5 c1972777ad8a8b590091efd3a4dde67b
- SHA1 33513fec5b369256cab40980e022ff3368089c0e
- SHA512 254426c36b39731ff4c07c86e30b23434d438024d30b0f8bbed0f19b1f7225644eee2dfe427068d1b1aeeb2ef88aab32ab74369dc799db5e0a37f73321048b95
- SSDEEP 393216:siGrZag/6KiuKk9k9B/yyq03lvGwODuycrJSFuRMYp/27bWPRz9Ftjh1:dGrZl/UBky9B/yy1VLgpop2ihtjh1
- TLSH T1F437338430E1D4BEC11029B953EDD9B3AE35EDE4CB0795FB33C4FD0B61B09986A6125A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yuanbao.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target yuanbao.exe
- Size 21.8MB
- SHA256 bca78e472cdf94c16fd67cdf2894d7286c17b370007878b988b9a9f9705f99d5
- MD5 c1972777ad8a8b590091efd3a4dde67b
- SHA1 33513fec5b369256cab40980e022ff3368089c0e
- SHA512 254426c36b39731ff4c07c86e30b23434d438024d30b0f8bbed0f19b1f7225644eee2dfe427068d1b1aeeb2ef88aab32ab74369dc799db5e0a37f73321048b95
- SSDEEP 393216:siGrZag/6KiuKk9k9B/yyq03lvGwODuycrJSFuRMYp/27bWPRz9Ftjh1:dGrZl/UBky9B/yy1VLgpop2ihtjh1
- TLSH T1F437338430E1D4BEC11029B953EDD9B3AE35EDE4CB0795FB33C4FD0B61B09986A6125A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL