General
- Target Spectra_Menu.exe
- Size 93.3MB
- Sample260723-nmst2shr9y
- SHA256 fd96f560525dc3a5e4bfae2c530517dddb5fb84da1ac36a47b2a371a082494bb
- MD5 9ee892332f6dd9a25a58ae4c1aab3ce4
- SHA1 3f2468acfb8c3756c39242e770be2695a70b9c59
- SHA512 9782e3c1fdcfb995d77d1c58e1a65009d24b66f2c5225be3f495646d7f72f2e6b843d5e47ecde243c680d23b3089196c12da06136ba36a50395d8db30cd3d973
- SSDEEP 1572864:GZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:GZa7hmguP2nUOnAwby
- TLSH T180286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spectra_Menu.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Spectra_Menu.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Spectra_Menu.exe
- Size 93.3MB
- SHA256 fd96f560525dc3a5e4bfae2c530517dddb5fb84da1ac36a47b2a371a082494bb
- MD5 9ee892332f6dd9a25a58ae4c1aab3ce4
- SHA1 3f2468acfb8c3756c39242e770be2695a70b9c59
- SHA512 9782e3c1fdcfb995d77d1c58e1a65009d24b66f2c5225be3f495646d7f72f2e6b843d5e47ecde243c680d23b3089196c12da06136ba36a50395d8db30cd3d973
- SSDEEP 1572864:GZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:GZa7hmguP2nUOnAwby
- TLSH T180286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.