General
- Target starter.zip
- Size 237KB
- Sample260721-pj7dpsbm2v
- SHA256 7ac7685d782af193fdc0846fa5aabb8548d7f40f4a449c4359f5150cbcf07db3
- MD5 3ac0b8b54be72f1de320f05764904f83
- SHA1 08b78794d5f1f994b6ba56efa039b22b847cea40
- SHA512 bfd16258c98dc177c8a9a16f3ef0b44ae19e5278a9251c9714c1db506183450d98ba49a1e674c3c8c4aa0b46e0a59ecf2823e6d35af911ed41819d4b3d1dc19b
- SSDEEP 6144:8u9TGNp0aAdLL1pWSVtnLYsooWvmEO6r7f+rWlQc+lB:8u2p7AdLJImhH6nf+ymlB
- TLSH T1D3342367873B08542C575ED7A1AE957470D1E2B063A1B9A2D46F32BB400ED86360CFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
starter.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target starter.exe
- Size 254KB
- SHA256 e614eaf438e5ef1edc5fbf9a856b3cdcb1431c200896f813b5ff1e63451bba26
- MD5 065e8785975c7dcb04007e75168af82f
- SHA1 6f7925ab28d7c8ef274210ed26ff634b449d6215
- SHA512 243479c3f3022658394bc3a8887bed9320abbfed3259d499bce87f8f3bfdea88d9fb84eaad5cf26fbb52bc489920b15ed1eb303f4395c91c19dfb837d36a4b60
- SSDEEP 3072:KEesl20IPv9Bzr6nobTHWsqsjcqOe5sx1ehcZoQWDrliyNX8hFd5cxNS3lYuOVwT:IC20INBoof2HqgyhnQWgkMhFd2E3lM6
- TLSH T1144422D41B78DA87D2A80D364477AB3ABE74FC35C84D4C0797A1AC4F2CB47A59A20F19
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)