General
- Target Rbx2Source.exe
- Size 8.2MB
- Sample260720-xnhvxact7j
- SHA256 43298ca3117a32a1081009466e3b006f106d53eb6ab1de6f9dbf2fbd67a68cc8
- MD5 2b83a78eb7a9b2b170f3c6f9dc4625b9
- SHA1 ec53430afae6bdc2251d70a9741b2550919fd1f4
- SHA512 fc711242d522d220e62de1f980203620035747b47e2ea9ba2875ce191fbf23fa265d17f395ee0139df109e3e971198718ef5829a69734b2f293856ce0865100a
- SSDEEP 98304:Z0qIiAdex4Wyg5hLerqDeX0wjgw8HQD22wEQjGkqXf0FQtH8:Z0s4QvfaEwjgw8HQD22wEoGkSIQtH8
- TLSH T13D86D704218C2E6DC9692D71CF1AFEACB58F8EFA1EA822B471FFFA54052845508717F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Rbx2Source.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Rbx2Source.exe
- Size 8.2MB
- SHA256 43298ca3117a32a1081009466e3b006f106d53eb6ab1de6f9dbf2fbd67a68cc8
- MD5 2b83a78eb7a9b2b170f3c6f9dc4625b9
- SHA1 ec53430afae6bdc2251d70a9741b2550919fd1f4
- SHA512 fc711242d522d220e62de1f980203620035747b47e2ea9ba2875ce191fbf23fa265d17f395ee0139df109e3e971198718ef5829a69734b2f293856ce0865100a
- SSDEEP 98304:Z0qIiAdex4Wyg5hLerqDeX0wjgw8HQD22wEQjGkqXf0FQtH8:Z0s4QvfaEwjgw8HQD22wEoGkSIQtH8
- TLSH T13D86D704218C2E6DC9692D71CF1AFEACB58F8EFA1EA822B471FFFA54052845508717F5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.