General
- Target NetLock_RMM_Agent_Installer_win-x64.exe
- Size 12.3MB
- Sample260721-phv92sbl3y
- SHA256 f9868bbd91e68473934f6e245b3d972e913209d0567fe945e52a212918ff4b58
- MD5 4056f72108211c9ed554186e4f110a01
- SHA1 3eb9144189e8970fb01b9b61ba1c77a1ddc1bc0a
- SHA512 640a8ddab5ab8f4bc0c34fd82379780c0d3cf145af10da5b1c5932b344894bebbcfb74ab8273fadd412c0bc28b3ae44e4bbeb46023785a378415407c777d14b4
- SSDEEP 196608:EtidXRR6SWyjwYgk+8o97TdxG6EHDTXFqEzSdK8GPp+pn8j1BROWWgEy2:9dXH5cpL7Ta60DTXUEOsp+mj1vx2
- TLSH T143D6BF56E2F901E8D47BC0B8C65B5627EBB234551330A7EB16A08A252F37FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
NetLock_RMM_Agent_Installer_win-x64.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NetLock_RMM_Agent_Installer_win-x64.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target NetLock_RMM_Agent_Installer_win-x64.exe
- Size 12.3MB
- SHA256 f9868bbd91e68473934f6e245b3d972e913209d0567fe945e52a212918ff4b58
- MD5 4056f72108211c9ed554186e4f110a01
- SHA1 3eb9144189e8970fb01b9b61ba1c77a1ddc1bc0a
- SHA512 640a8ddab5ab8f4bc0c34fd82379780c0d3cf145af10da5b1c5932b344894bebbcfb74ab8273fadd412c0bc28b3ae44e4bbeb46023785a378415407c777d14b4
- SSDEEP 196608:EtidXRR6SWyjwYgk+8o97TdxG6EHDTXFqEzSdK8GPp+pn8j1BROWWgEy2:9dXH5cpL7Ta60DTXUEOsp+mj1vx2
- TLSH T143D6BF56E2F901E8D47BC0B8C65B5627EBB234551330A7EB16A08A252F37FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.