General
- Target 12c42e91c0e7fe95a8fa9f31ecc21259c81ac2cecc080c2c7904c6bc6b36a50f
- Size 1.1MB
- Sample260720-mr8wdsfs4n
- SHA256 12c42e91c0e7fe95a8fa9f31ecc21259c81ac2cecc080c2c7904c6bc6b36a50f
- MD5 3f95e096bb01ea330624f16576b93b43
- SHA1 66e8b4199b83a435d9793fe148995eafc7c70be0
- SHA512 f491daa6fde9e26abd8205f427e6e7affd781293f1cacdcbdb7c380e06a844eb7391cb3be3d6c7f6948df50a08fe521ad306f6007ecd2b4d8c9ef01ba5d694a2
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnO:AylFHUv6ReIt0jSrOV
- TLSH T129357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
12c42e91c0e7fe95a8fa9f31ecc21259c81ac2cecc080c2c7904c6bc6b36a50f.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
12c42e91c0e7fe95a8fa9f31ecc21259c81ac2cecc080c2c7904c6bc6b36a50f.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 12c42e91c0e7fe95a8fa9f31ecc21259c81ac2cecc080c2c7904c6bc6b36a50f
- Size 1.1MB
- SHA256 12c42e91c0e7fe95a8fa9f31ecc21259c81ac2cecc080c2c7904c6bc6b36a50f
- MD5 3f95e096bb01ea330624f16576b93b43
- SHA1 66e8b4199b83a435d9793fe148995eafc7c70be0
- SHA512 f491daa6fde9e26abd8205f427e6e7affd781293f1cacdcbdb7c380e06a844eb7391cb3be3d6c7f6948df50a08fe521ad306f6007ecd2b4d8c9ef01ba5d694a2
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnO:AylFHUv6ReIt0jSrOV
- TLSH T129357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE