General
- Target 00f9926f0ab596a60892614a48d17c294930176fcec9886796b103284c260b5a
- Size 726KB
- Sample260724-epalta1wbv
- SHA256 00f9926f0ab596a60892614a48d17c294930176fcec9886796b103284c260b5a
- MD5 7fe994311085cf81a20ca99f108e94ec
- SHA1 861252f3d5bd070fec870dfb4c7df4fcb1f73a3f
- SHA512 d211ae371552eb6bef8800bd3585d3efe6d50b5a0bed0067c45a494c249673095035c551b2ce1d9ab3355e7783447203b72657b2b550e762699e0bb681b8b7f6
- SSDEEP 12288:W/XEXxg5SJgziEG6q9TUu2fUVzi2YHOER9M+NXODgBIhQ0R8ehCkvhvALT:W/XEXjJSi6K3V8RDRe+ygyhQ6Vh3vtAH
- TLSH T1B1F40222FAC48471C53219381EE2A231AA7D7C2117B5CDEF5B945BAD3F700D1AB36A61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
00f9926f0ab596a60892614a48d17c294930176fcec9886796b103284c260b5a.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 00f9926f0ab596a60892614a48d17c294930176fcec9886796b103284c260b5a
- Size 726KB
- SHA256 00f9926f0ab596a60892614a48d17c294930176fcec9886796b103284c260b5a
- MD5 7fe994311085cf81a20ca99f108e94ec
- SHA1 861252f3d5bd070fec870dfb4c7df4fcb1f73a3f
- SHA512 d211ae371552eb6bef8800bd3585d3efe6d50b5a0bed0067c45a494c249673095035c551b2ce1d9ab3355e7783447203b72657b2b550e762699e0bb681b8b7f6
- SSDEEP 12288:W/XEXxg5SJgziEG6q9TUu2fUVzi2YHOER9M+NXODgBIhQ0R8ehCkvhvALT:W/XEXjJSi6K3V8RDRe+ygyhQ6Vh3vtAH
- TLSH T1B1F40222FAC48471C53219381EE2A231AA7D7C2117B5CDEF5B945BAD3F700D1AB36A61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1