General
- Target whatStrap.exe
- Size 68.8MB
- Sample260727-sw2krswbpg
- SHA256 8bf47ae4e39be0d7a2a2aac97894bde6751104335d48ce4660631b0f1bce4568
- MD5 1d38519e1cc3ece43316a4014013ecb3
- SHA1 90b942b858afa7f6dec15dccf6d1c90cdb0d0047
- SHA512 aa7e605b13ac998f36ffa1a0d1a5a176d784407a769dd9f367c0399444eac23b825d42b64f440dd02ea8a8e47fcd16c375d3359b8639e55a916562d8ee2ec10d
- SSDEEP 1572864:a5Dhdn0iKCTGXA/F7crWwOXIU93jHh7tGPkwVoSPxj0F:RFCTGgJwOB3jHhQrR0F
- TLSH T14FF72356E2FD00E8D57AC0BCC6575517E7B1385917309BEB62A48A692F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
whatStrap.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
whatStrap.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target whatStrap.exe
- Size 68.8MB
- SHA256 8bf47ae4e39be0d7a2a2aac97894bde6751104335d48ce4660631b0f1bce4568
- MD5 1d38519e1cc3ece43316a4014013ecb3
- SHA1 90b942b858afa7f6dec15dccf6d1c90cdb0d0047
- SHA512 aa7e605b13ac998f36ffa1a0d1a5a176d784407a769dd9f367c0399444eac23b825d42b64f440dd02ea8a8e47fcd16c375d3359b8639e55a916562d8ee2ec10d
- SSDEEP 1572864:a5Dhdn0iKCTGXA/F7crWwOXIU93jHh7tGPkwVoSPxj0F:RFCTGgJwOB3jHhQrR0F
- TLSH T14FF72356E2FD00E8D57AC0BCC6575517E7B1385917309BEB62A48A692F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger