General
- Target b81ba7ec2c16bc03c9bc3b55cfcab370744b7d04fdc1bb5490d6e307d02ecfd9
- Size 1.6MB
- Sample260729-g6zclsam2t
- SHA256 b81ba7ec2c16bc03c9bc3b55cfcab370744b7d04fdc1bb5490d6e307d02ecfd9
- MD5 565f46c56c221032130db26bff9c1ee2
- SHA1 0cecbe6f99483c2f882b5f0de7101b36b76a0bc2
- SHA512 84f2fd70505fb8656a29c57793fb8db0f757e232f09b5c1ab277770ff5b250a625dbf7a53c19f959cec0520dbe5bf3939149ecf3854449206c0e9e8ecbd60663
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfz:AylFHUv6ReIt0jSrOA88gz
- TLSH T11F758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b81ba7ec2c16bc03c9bc3b55cfcab370744b7d04fdc1bb5490d6e307d02ecfd9.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b81ba7ec2c16bc03c9bc3b55cfcab370744b7d04fdc1bb5490d6e307d02ecfd9.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target b81ba7ec2c16bc03c9bc3b55cfcab370744b7d04fdc1bb5490d6e307d02ecfd9
- Size 1.6MB
- SHA256 b81ba7ec2c16bc03c9bc3b55cfcab370744b7d04fdc1bb5490d6e307d02ecfd9
- MD5 565f46c56c221032130db26bff9c1ee2
- SHA1 0cecbe6f99483c2f882b5f0de7101b36b76a0bc2
- SHA512 84f2fd70505fb8656a29c57793fb8db0f757e232f09b5c1ab277770ff5b250a625dbf7a53c19f959cec0520dbe5bf3939149ecf3854449206c0e9e8ecbd60663
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfz:AylFHUv6ReIt0jSrOA88gz
- TLSH T11F758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE