General
- Target WPD.exe
- Size 576KB
- Sample260728-rd7hmahf38
- SHA256 c21e9de5b28de8edfb6b2264b33846e842f7954ad70fa07b3c652feb5f0a09d7
- MD5 65325f636ac238568a21f389387f0299
- SHA1 acf8022648f3eab3b6da50e0f90301eefe64a3f7
- SHA512 9580e5f040f7adb0cfd5dc8749ddc501c97c849fd7bde4b2d66af6beb5d4a2505546b053723d53009ece3014ee87723bbc23729e43c6aec0698ff514c2ac33a2
- SSDEEP 6144:TRQucww8JJQLbRYX3XJ7Sjt52vljOwsxVDC5Mq7Zj2R7beOW2wmIyWk5QoBN6Z61:1cwoQkl2JI
- TLSH T185C4083827F80351F5BB9B3684B507718675BD0AE939D74C2A89359D0872B01ADA2F3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WPD.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WPD.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WPD.exe
- Size 576KB
- SHA256 c21e9de5b28de8edfb6b2264b33846e842f7954ad70fa07b3c652feb5f0a09d7
- MD5 65325f636ac238568a21f389387f0299
- SHA1 acf8022648f3eab3b6da50e0f90301eefe64a3f7
- SHA512 9580e5f040f7adb0cfd5dc8749ddc501c97c849fd7bde4b2d66af6beb5d4a2505546b053723d53009ece3014ee87723bbc23729e43c6aec0698ff514c2ac33a2
- SSDEEP 6144:TRQucww8JJQLbRYX3XJ7Sjt52vljOwsxVDC5Mq7Zj2R7beOW2wmIyWk5QoBN6Z61:1cwoQkl2JI
- TLSH T185C4083827F80351F5BB9B3684B507718675BD0AE939D74C2A89359D0872B01ADA2F3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory