General
- Target 0d18c4c35e3b99d16f3d8a42cc197c38d9eaac55c2297b35688cb3fd2f8b009d
- Size 1.1MB
- Sample260720-lr2lmsdw5k
- SHA256 0d18c4c35e3b99d16f3d8a42cc197c38d9eaac55c2297b35688cb3fd2f8b009d
- MD5 8ff517e5afefa979765289ce56083ab5
- SHA1 864641d639ae7e1d3ac755e6a1ed1170c6d38f7d
- SHA512 ebe02b330aba5f1ed91f9cf289e972037c22f22dfefc44928cbf542d6b4032d318ec574cf890c50c14e6b9f2e05c1cd995c5c5a691b41140ef16e2125266a6df
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnX:AylFHUv6ReIt0jSrOk
- TLSH T1E4357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0d18c4c35e3b99d16f3d8a42cc197c38d9eaac55c2297b35688cb3fd2f8b009d.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d18c4c35e3b99d16f3d8a42cc197c38d9eaac55c2297b35688cb3fd2f8b009d.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0d18c4c35e3b99d16f3d8a42cc197c38d9eaac55c2297b35688cb3fd2f8b009d
- Size 1.1MB
- SHA256 0d18c4c35e3b99d16f3d8a42cc197c38d9eaac55c2297b35688cb3fd2f8b009d
- MD5 8ff517e5afefa979765289ce56083ab5
- SHA1 864641d639ae7e1d3ac755e6a1ed1170c6d38f7d
- SHA512 ebe02b330aba5f1ed91f9cf289e972037c22f22dfefc44928cbf542d6b4032d318ec574cf890c50c14e6b9f2e05c1cd995c5c5a691b41140ef16e2125266a6df
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnX:AylFHUv6ReIt0jSrOk
- TLSH T1E4357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE