General
- Target 001my6.9.exe
- Size 3.9MB
- Sample260729-g2vtmaytfs
- SHA256 9c54cc621ff457e4189aa0eaf6b817e2572f5fa38f9b6bdf9334da95d130befc
- MD5 a714f152846ced930cd445d8d6ce5d36
- SHA1 e2fc949f6f042df3c8eeb7b651c2c3a3e47724d2
- SHA512 690935d3c82473b871d16f0ba7f7622da0d769f8a682d0a79138c428ab21d593aa12b147bc68d7881cc7972ec487a304eaaa7afe8e339e2e3b34cc8cd7498041
- SSDEEP 98304:7Z9w9x+bWluEu+ftmJbo35gr51pluDdSdwsYkrWW3IzpyWk:NGibwrftmUir5/YUwCI1yW
- TLSH T1C71633E3FACE00F0E17126787C511AC38726B4376D2CE8D9A6D57E0A7D785E285B46C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
001my6.9.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 001my6.9.exe
- Size 3.9MB
- SHA256 9c54cc621ff457e4189aa0eaf6b817e2572f5fa38f9b6bdf9334da95d130befc
- MD5 a714f152846ced930cd445d8d6ce5d36
- SHA1 e2fc949f6f042df3c8eeb7b651c2c3a3e47724d2
- SHA512 690935d3c82473b871d16f0ba7f7622da0d769f8a682d0a79138c428ab21d593aa12b147bc68d7881cc7972ec487a304eaaa7afe8e339e2e3b34cc8cd7498041
- SSDEEP 98304:7Z9w9x+bWluEu+ftmJbo35gr51pluDdSdwsYkrWW3IzpyWk:NGibwrftmUir5/YUwCI1yW
- TLSH T1C71633E3FACE00F0E17126787C511AC38726B4376D2CE8D9A6D57E0A7D785E285B46C2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger