General
- Target madrspssetu.exe
- Size 332KB
- Sample260724-pkhfzaywhy
- SHA256 ee8087497e496598188759796327f0ff10573c39e74e08e563cc9c02a9c071e1
- MD5 52b2cdb6ce4b1e336cab3cc3d1580d5f
- SHA1 0dc5bcc15f95ae527238f2d7f4a182caf56ef83b
- SHA512 e9a355294013e64e8a2a4c00a65732ed60d33677930d919628a305567da02aca0e80494ef16437e478f15be31df6d32431f83b97c583bb832485d90f289db06e
- SSDEEP 384:6LIkUXMvcg1W60QM0veO0QL0It3vTquJn5t/ycccQxulIrWJKNOWtksTOMTQAQAI:kIkUXGpjZbquLt/yccc0uGZDBkMD8
- TLSH T1E574D90423CCAA2BCDBE167F15A345419AF0DD239025FF567DC9F3DC459BB884A80AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
madrspssetu.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
madrspssetu.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target madrspssetu.exe
- Size 332KB
- SHA256 ee8087497e496598188759796327f0ff10573c39e74e08e563cc9c02a9c071e1
- MD5 52b2cdb6ce4b1e336cab3cc3d1580d5f
- SHA1 0dc5bcc15f95ae527238f2d7f4a182caf56ef83b
- SHA512 e9a355294013e64e8a2a4c00a65732ed60d33677930d919628a305567da02aca0e80494ef16437e478f15be31df6d32431f83b97c583bb832485d90f289db06e
- SSDEEP 384:6LIkUXMvcg1W60QM0veO0QL0It3vTquJn5t/ycccQxulIrWJKNOWtksTOMTQAQAI:kIkUXGpjZbquLt/yccc0uGZDBkMD8
- TLSH T1E574D90423CCAA2BCDBE167F15A345419AF0DD239025FF567DC9F3DC459BB884A80AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application