General
- Target a93c6a03b233b08ebd4bf3bf65af07435bbd1de1fbb6b59b9d1562abf5c81f60
- Size 15.5MB
- Sample260728-dvx4maeg24
- SHA256 a93c6a03b233b08ebd4bf3bf65af07435bbd1de1fbb6b59b9d1562abf5c81f60
- MD5 38b07bc6014cc27003bce322a5395470
- SHA1 3d74327aebe2330246e5901337a9273f294a7d3d
- SHA512 3741e7119c2ef1bf1f1a80384980f4746c147f11ce8e39854e75f729726a479f4ba758f9a3fb8b89d5a8d0c2287dec94ac9a2eff6223014c48056b940f6b8973
- SSDEEP 393216:erqPy+sMN1at6iHZ1BDlL1n/13mlVZAamGNIg:RhxN1WPZvclV2Ap
- TLSH T118F63324BEE3D8F2C4D32C724DE411B63A79F8404B54FEAB26EC46244D60D83767E929
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a93c6a03b233b08ebd4bf3bf65af07435bbd1de1fbb6b59b9d1562abf5c81f60.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
a93c6a03b233b08ebd4bf3bf65af07435bbd1de1fbb6b59b9d1562abf5c81f60.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target a93c6a03b233b08ebd4bf3bf65af07435bbd1de1fbb6b59b9d1562abf5c81f60
- Size 15.5MB
- SHA256 a93c6a03b233b08ebd4bf3bf65af07435bbd1de1fbb6b59b9d1562abf5c81f60
- MD5 38b07bc6014cc27003bce322a5395470
- SHA1 3d74327aebe2330246e5901337a9273f294a7d3d
- SHA512 3741e7119c2ef1bf1f1a80384980f4746c147f11ce8e39854e75f729726a479f4ba758f9a3fb8b89d5a8d0c2287dec94ac9a2eff6223014c48056b940f6b8973
- SSDEEP 393216:erqPy+sMN1at6iHZ1BDlL1n/13mlVZAamGNIg:RhxN1WPZvclV2Ap
- TLSH T118F63324BEE3D8F2C4D32C724DE411B63A79F8404B54FEAB26EC46244D60D83767E929
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Drops file in System32 directory