General
- Target 442.rar
- Size 75.5MB
- Sample260720-bcxzssay3k
- SHA256 e10ede3a17cc496b3487543df544369a579c40cc5e235888574350311bc000bb
- MD5 982879578a6b8122cb7442e2c8bba002
- SHA1 1bcb5ca7f5423a70e57c9f9ca6d4e76dfe998596
- SHA512 48a44ba2a8e57b7a2d571a1a265ac0f29ef0e7b8ceef8e8d90c7004d5d31b99c1eeb916a5ccefa855aa9fb096b3f4e15ab4dc790e12f17f726094e17e3acd1b9
- SSDEEP 1572864:GBaqJbXLuh68MK6b4rZT11I/GMDThg1CAAujyr/IOrZGvsW:GQsXLTlKQ4rZT11I+MDwCdujyUGZQb
- TLSH T1A60833BCE9D7ADD61D22FAE3C1A4617FC54585BF4E6288A763420F8AC4C1C72B14B718
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
442.rar
Resource
win10v2004-20260513-en
23 signatures
300 seconds
Behavioral task
behavioral2
Sample
442.rar
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target 442.rar
- Size 75.5MB
- SHA256 e10ede3a17cc496b3487543df544369a579c40cc5e235888574350311bc000bb
- MD5 982879578a6b8122cb7442e2c8bba002
- SHA1 1bcb5ca7f5423a70e57c9f9ca6d4e76dfe998596
- SHA512 48a44ba2a8e57b7a2d571a1a265ac0f29ef0e7b8ceef8e8d90c7004d5d31b99c1eeb916a5ccefa855aa9fb096b3f4e15ab4dc790e12f17f726094e17e3acd1b9
- SSDEEP 1572864:GBaqJbXLuh68MK6b4rZT11I/GMDThg1CAAujyr/IOrZGvsW:GQsXLTlKQ4rZT11I+MDwCdujyUGZQb
- TLSH T1A60833BCE9D7ADD61D22FAE3C1A4617FC54585BF4E6288A763420F8AC4C1C72B14B718
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger