General
- Target duckdb.exe
- Size 35.3MB
- Sample260727-p9l6fssgpb
- SHA256 7faeaad223c6df0d6a85792a92c95d89029c0fea86f6588e9b34f8c3892303f7
- MD5 f152bf02cba3dfa0a3075369d4b551aa
- SHA1 a6870328608a5838a447967f2ef0809aa0b16b73
- SHA512 a45b89df3e05e3b4cb94bcbdb4ebf8b28d3424223f2e6dd50c05e66ab44dd1f00921f646f22e3289ab32a7cabc800cdc1499fd0c29a677da9ff31bc08123db91
- SSDEEP 393216:E950dNSZEHF5JzytndfKf0l6Mie4YYoDhz90dNAjyg5msgP+SxnmVq+:ERdJbLj+egP+Sx6q+
- TLSH T193877D57B1A705DCE4BAC075CAEA5903EBB17C4603309ADF01905F736E77AE0A67AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
duckdb.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
duckdb.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target duckdb.exe
- Size 35.3MB
- SHA256 7faeaad223c6df0d6a85792a92c95d89029c0fea86f6588e9b34f8c3892303f7
- MD5 f152bf02cba3dfa0a3075369d4b551aa
- SHA1 a6870328608a5838a447967f2ef0809aa0b16b73
- SHA512 a45b89df3e05e3b4cb94bcbdb4ebf8b28d3424223f2e6dd50c05e66ab44dd1f00921f646f22e3289ab32a7cabc800cdc1499fd0c29a677da9ff31bc08123db91
- SSDEEP 393216:E950dNSZEHF5JzytndfKf0l6Mie4YYoDhz90dNAjyg5msgP+SxnmVq+:ERdJbLj+egP+Sx6q+
- TLSH T193877D57B1A705DCE4BAC075CAEA5903EBB17C4603309ADF01905F736E77AE0A67AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.