General
- Target 2caf2a59d77c22e77bd565b9db51433aa87e7d453febe6abf6dcfeea714ae61f
- Size 18KB
- Sample260728-ch1tbawcjb
- SHA256 2caf2a59d77c22e77bd565b9db51433aa87e7d453febe6abf6dcfeea714ae61f
- MD5 38fba4a1669620b6c01cf2002b1a3112
- SHA1 26041d16147e9cf35e26cbd0ea202efa468bce15
- SHA512 b35ca0e4b3a3e359b52fc5e1a99c42250ca85d27f84956d97d91cbccb68737a6bf4b868f05415aa355a17c0ae42e56c4eb400c4fdae0ba9e0e4aa74f22ac2103
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6H:uTQWckBeEd6ml1pcg7F3GiElpd2g
- TLSH T11E82B6356BE55D73E3BBDBB196F7C1D66975742B2E03992E80481B882833A10DC60F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2caf2a59d77c22e77bd565b9db51433aa87e7d453febe6abf6dcfeea714ae61f.exe
Resource
win10v2004-20260513-en
7 signatures
600 seconds
Behavioral task
behavioral2
Sample
2caf2a59d77c22e77bd565b9db51433aa87e7d453febe6abf6dcfeea714ae61f.exe
Resource
win11ltsc2024-20260709-en
6 signatures
600 seconds
Malware Config
Targets
-
- Target 2caf2a59d77c22e77bd565b9db51433aa87e7d453febe6abf6dcfeea714ae61f
- Size 18KB
- SHA256 2caf2a59d77c22e77bd565b9db51433aa87e7d453febe6abf6dcfeea714ae61f
- MD5 38fba4a1669620b6c01cf2002b1a3112
- SHA1 26041d16147e9cf35e26cbd0ea202efa468bce15
- SHA512 b35ca0e4b3a3e359b52fc5e1a99c42250ca85d27f84956d97d91cbccb68737a6bf4b868f05415aa355a17c0ae42e56c4eb400c4fdae0ba9e0e4aa74f22ac2103
- SSDEEP 192:uTk5WckBezHYQRPK6k7TjHwCl1oynzc2Fjmf2mrETLLC0qmg+jjGiEloCFy3nL6H:uTQWckBeEd6ml1pcg7F3GiElpd2g
- TLSH T11E82B6356BE55D73E3BBDBB196F7C1D66975742B2E03992E80481B882833A10DC60F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Waski payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE