General
- Target 4322046ff722c298610875f72eda5f342f238387831edf61a6bd6d01f40043d8
- Size 3.6MB
- Sample260723-tl6x6sseqe
- SHA256 4322046ff722c298610875f72eda5f342f238387831edf61a6bd6d01f40043d8
- MD5 b1051a0f3dd703647eedea710aff9cbb
- SHA1 b3c9e29b4ab447b6035ef36d1df4b771810a0e00
- SHA512 950bf68c8ad8713eb90cd1e2ac384de87c40d42ec46f1a2cf5fdfb3b5b533ad270ffed0ca18bf8128bff033854c57228e50a9bc033f4e30dfd5496cc58fad16e
- SSDEEP 98304:mQuf8j3qRdbngiBInVgRf7SMrmngdrrfWNyZO1crrQQ:mQuEj6RdsIpddrftSQOU
- TLSH T1BA063398E774FE3B1F47F07153E89F5A28B5046B96B8DE0E08A04D5DC9FACA54341839
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
四方接码客户端.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
四方接码客户端.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 四方接码客户端.exe
- Size 10.0MB
- SHA256 931de0dd877ad733d5b3fc825fe81bb0f82030b30600b080a0e06a8237ec12fa
- MD5 8f6024d47edcd952feda456c83ac98ac
- SHA1 f0b1156821763fbc094f61887c01f37f4a4d5535
- SHA512 c184d6cd17eee67cac1ee63a5b64a3f784727ef90b424b7f13c1f1e8ac0820d1209fe2ae2ca7c6106a872f9e242c49a255ef042371bb50da8821d10f417f5a85
- SSDEEP 196608:TsSOkUwdnZ5EtwRRxNf3UIAStLTYRs1c3KRa0/:HOk1Z5L/AStLTY9a7
- TLSH T1E3B68CD0AFD3C163C0F103B2D058A578E4BB9D2C8E6195B72D8CFA3D2536DB999A144E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Adds policy Run key to start application
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL