General
- Target 5b3f47320a80982f7ae2681750a1e0c36ba77cd51088536f6e2860fd02d252c8
- Size 1.6MB
- Sample260729-kpdlcszdle
- SHA256 5b3f47320a80982f7ae2681750a1e0c36ba77cd51088536f6e2860fd02d252c8
- MD5 31a8727cac9caacd459801180e3d8b43
- SHA1 c40b397a778fe24931686da448e800e90c7a6a82
- SHA512 54d0ce8c0420c50bdef19dc24427b8d6a1b140386b5a66c86051f9aa4516ca1e7c48f535cfdddfbd43c5f42c93a5c7ba8a097375f41b5fbfbd8fd2d393fc192d
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQB:AylFHUv6ReIt0jSrOA88a
- TLSH T1E7758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5b3f47320a80982f7ae2681750a1e0c36ba77cd51088536f6e2860fd02d252c8.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b3f47320a80982f7ae2681750a1e0c36ba77cd51088536f6e2860fd02d252c8.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 5b3f47320a80982f7ae2681750a1e0c36ba77cd51088536f6e2860fd02d252c8
- Size 1.6MB
- SHA256 5b3f47320a80982f7ae2681750a1e0c36ba77cd51088536f6e2860fd02d252c8
- MD5 31a8727cac9caacd459801180e3d8b43
- SHA1 c40b397a778fe24931686da448e800e90c7a6a82
- SHA512 54d0ce8c0420c50bdef19dc24427b8d6a1b140386b5a66c86051f9aa4516ca1e7c48f535cfdddfbd43c5f42c93a5c7ba8a097375f41b5fbfbd8fd2d393fc192d
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQB:AylFHUv6ReIt0jSrOA88a
- TLSH T1E7758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE