General
- Target WinHex.exe
- Size 2.3MB
- Sample260728-w4emrasend
- SHA256 13f31346780baa4df60d44d10616fc4c8bd0a1467a2829a25bdeae08d5412e38
- MD5 3227b49b459a83fadb3997433fae43e8
- SHA1 4bfe52fa5223f9e8fa5e5358889e5b0c3f29cd05
- SHA512 0fe089bd896d00181d81a27ae5da850da954b528716afe6cd02985d4d662d716ce891bd85bf42cce1bd5b838d7d3ae6d2490d2c898bdb41e84dd98b3432c4aa3
- SSDEEP 49152:ih8Fy2w0kFwp2dP2n+uzqC56TnOSfZ9/oOrIHdk+1xCaWznuRiphu+Lo8c2Q:y/Sp2d+n+uzqC56bB/rI9kwPcnu4pBm
- TLSH T13DB533B9A7A2703BC0A1397386AE45DE35EC1D9707072CDF56B903B18E377439A74868
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
WinHex.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target WinHex.exe
- Size 2.3MB
- SHA256 13f31346780baa4df60d44d10616fc4c8bd0a1467a2829a25bdeae08d5412e38
- MD5 3227b49b459a83fadb3997433fae43e8
- SHA1 4bfe52fa5223f9e8fa5e5358889e5b0c3f29cd05
- SHA512 0fe089bd896d00181d81a27ae5da850da954b528716afe6cd02985d4d662d716ce891bd85bf42cce1bd5b838d7d3ae6d2490d2c898bdb41e84dd98b3432c4aa3
- SSDEEP 49152:ih8Fy2w0kFwp2dP2n+uzqC56TnOSfZ9/oOrIHdk+1xCaWznuRiphu+Lo8c2Q:y/Sp2d+n+uzqC56bB/rI9kwPcnu4pBm
- TLSH T13DB533B9A7A2703BC0A1397386AE45DE35EC1D9707072CDF56B903B18E377439A74868
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.