General
- Target PcrPlus.exe
- Size 7.0MB
- Sample260723-wgcvmscc55
- SHA256 15dbc70505a4c1d90abd630f6782b48d0edfc21e8e2d45546fad2eeabe786fa5
- MD5 2fc63b2ca00281bb67c849a9e6480cd0
- SHA1 a6499a654b7398be449efc147379206c0d80472b
- SHA512 fe7adc34afe606ab15d75e7546315cf43f353fe8420680e599a55cc74729ed5044d78d1faf06bd55c0a7a0285e4f1f6a809ea18daf6d17c925ad96883c1e3a85
- SSDEEP 196608:ABruOhyfct3BtmYrNImmc1xyT3Q06VcQV6cyFSB:AFhy0lnrxb0AxLV2FC
- TLSH T170763381D381636EC380907DB65BD71A42A5EE37C33E44572F0B85AD2A2312FD9D1ABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
PcrPlus.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
PcrPlus.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target PcrPlus.exe
- Size 7.0MB
- SHA256 15dbc70505a4c1d90abd630f6782b48d0edfc21e8e2d45546fad2eeabe786fa5
- MD5 2fc63b2ca00281bb67c849a9e6480cd0
- SHA1 a6499a654b7398be449efc147379206c0d80472b
- SHA512 fe7adc34afe606ab15d75e7546315cf43f353fe8420680e599a55cc74729ed5044d78d1faf06bd55c0a7a0285e4f1f6a809ea18daf6d17c925ad96883c1e3a85
- SSDEEP 196608:ABruOhyfct3BtmYrNImmc1xyT3Q06VcQV6cyFSB:AFhy0lnrxb0AxLV2FC
- TLSH T170763381D381636EC380907DB65BD71A42A5EE37C33E44572F0B85AD2A2312FD9D1ABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory