General
- Target Stagsi-0.74.1712.exe
- Size 3.9MB
- Sample260721-ple28stths
- SHA256 ffbd0b05f53a6d36fafea6ca630f6b4421d94341318840a319daef1b82b3492c
- MD5 a28dd626dd1a027ef3fd22bb1eb289e3
- SHA1 14da40968befd51e09788acf473c20a494230a2b
- SHA512 1584469087de269b09e67f7cd99a9d0d9c91089d37db902986436024d722b003c114defb29fd70c29c473020e0fac9315f4946c9472cc9b281489d841609b14c
- SSDEEP 98304:nS3a4cpEWnuap6BpcK/CHZQEfYhrhBd3FpuLgdeG4ib:Fe+uyspc1OqYhrF/deNO
- TLSH T118161201BAA4C235D1B243305D75DB1146BEBD2A9F35C2CF77840AAE5E713D1AA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Stagsi-0.74.1712.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stagsi-0.74.1712.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Stagsi-0.74.1712.exe
- Size 3.9MB
- SHA256 ffbd0b05f53a6d36fafea6ca630f6b4421d94341318840a319daef1b82b3492c
- MD5 a28dd626dd1a027ef3fd22bb1eb289e3
- SHA1 14da40968befd51e09788acf473c20a494230a2b
- SHA512 1584469087de269b09e67f7cd99a9d0d9c91089d37db902986436024d722b003c114defb29fd70c29c473020e0fac9315f4946c9472cc9b281489d841609b14c
- SSDEEP 98304:nS3a4cpEWnuap6BpcK/CHZQEfYhrhBd3FpuLgdeG4ib:Fe+uyspc1OqYhrF/deNO
- TLSH T118161201BAA4C235D1B243305D75DB1146BEBD2A9F35C2CF77840AAE5E713D1AA31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.