General
- Target vac4.65.zip
- Size 2.6MB
- Sample260721-vb6ebser31
- SHA256 4f58393ae8abdc349323206b3c1e7f8f7d433c4a2818c306759c0f4b2215c74e
- MD5 34e427196a7f5cc8f127c8bfcaf41350
- SHA1 0a3ac48a222ccf74e2503cf1ab2f5a5cb9a5c073
- SHA512 2d8ea91ba17b7223830a3111a45fe0ba43b2f40c0d95a225e1f841e31c0ee37ba78963649edddabf74be63844a2d681f59e5c6ab44faeb907d3ffc3effb5dd2a
- SSDEEP 49152:JAVX/tH97jz3rVly7N6i2zdo+HQTwel3XO4AMitBke:JO/tHJjTrVly7N/23QTjAMit5
- TLSH T187C58B5173F80C69F6F2BB74AAB856169A36FC811F39C2CF2214965D1D36BC09E34362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
vac4.65/setup64.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
vac4.65/setup64.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target vac4.65/setup64.exe
- Size 136KB
- SHA256 d9ff7eb0f7536c199e9e6bccd5da2b7dd52e4894b03d22257518faf224b174b1
- MD5 c5f79a0e4c19a6beffc73da5285ed712
- SHA1 0e41f62ce7b5dec2f46b57f6d6e0a06e663b8012
- SHA512 c545198c04d7ca8501cdf46fb159374ba420908d2fdbab4c112e0afcd29b831e4065d888431d02b031631b8d0c5b105a38f6fb937d6996a7eef14855627b31bf
- SSDEEP 3072:r1JUYrr64PE7PEwkNBgHMcnL8zsHMOY4jb0r0Q:SAwkNSpL2sU4jxQ
- TLSH T19BD34F8077F80668F6B6AF75ADB401269A727C959F34C2CF1225C94E2D62BC4D874B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops file in System32 directory