General
- Target CBinderOutput.exe
- Size 12.3MB
- Sample260727-2yrb9afm3v
- SHA256 7963b552a8743a7a50e53ae87a3165d2e71e14b8c599073e780c982cb9d06415
- MD5 e9184fe301444cb3f5232a167774dca3
- SHA1 2b830f16be902eca2cf9fb6ae0680cb469a9c05d
- SHA512 859219b0b2b9b9e212a0da386171eb1a0d0d2cd29fc4ab07b09d2167ddb757068134a3615a700857992e2575b99b5fedd83d63b4f7e2ae0cefcf73e03761e3f4
- SSDEEP 196608:nP7fadI/wwWV7c+COX2rvFPBoo2XtvwgGEHQnnkrP3Kx4HQ4hLTJ49mR9Wm:nP7faKc78FJo1twg/HC2P3Kx4HQ+R4Rm
- TLSH T1A2D6338CC19407B3D9BB21F826B7CBB942D88E591D339CF839437A7D3DB711984219A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CBinderOutput.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
CBinderOutput.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target CBinderOutput.exe
- Size 12.3MB
- SHA256 7963b552a8743a7a50e53ae87a3165d2e71e14b8c599073e780c982cb9d06415
- MD5 e9184fe301444cb3f5232a167774dca3
- SHA1 2b830f16be902eca2cf9fb6ae0680cb469a9c05d
- SHA512 859219b0b2b9b9e212a0da386171eb1a0d0d2cd29fc4ab07b09d2167ddb757068134a3615a700857992e2575b99b5fedd83d63b4f7e2ae0cefcf73e03761e3f4
- SSDEEP 196608:nP7fadI/wwWV7c+COX2rvFPBoo2XtvwgGEHQnnkrP3Kx4HQ4hLTJ49mR9Wm:nP7faKc78FJo1twg/HC2P3Kx4HQ+R4Rm
- TLSH T1A2D6338CC19407B3D9BB21F826B7CBB942D88E591D339CF839437A7D3DB711984219A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.