General
- Target 3d9a4424e649f28485f30c9ad08c6e6b89818ed6298c3100c356efec1f6fd825
- Size 1.6MB
- Sample260730-kdbydsxydt
- SHA256 3d9a4424e649f28485f30c9ad08c6e6b89818ed6298c3100c356efec1f6fd825
- MD5 6610bf9e8dbc7b6d3e841308cfa54b45
- SHA1 486e99fbf6dfc9c12e166c01f04c8cf0e6ce69b4
- SHA512 1c34ad9c2fff57fa994f7d12d2f4f4fc421534abc9b1b03cdac7f7b90826dd054bf8110163eed0d2442f222517948e3fda5ee1b6c957c6da1e6d634ebb770e4a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfC:AylFHUv6ReIt0jSrOA88gC
- TLSH T1C7757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d9a4424e649f28485f30c9ad08c6e6b89818ed6298c3100c356efec1f6fd825.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d9a4424e649f28485f30c9ad08c6e6b89818ed6298c3100c356efec1f6fd825.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 3d9a4424e649f28485f30c9ad08c6e6b89818ed6298c3100c356efec1f6fd825
- Size 1.6MB
- SHA256 3d9a4424e649f28485f30c9ad08c6e6b89818ed6298c3100c356efec1f6fd825
- MD5 6610bf9e8dbc7b6d3e841308cfa54b45
- SHA1 486e99fbf6dfc9c12e166c01f04c8cf0e6ce69b4
- SHA512 1c34ad9c2fff57fa994f7d12d2f4f4fc421534abc9b1b03cdac7f7b90826dd054bf8110163eed0d2442f222517948e3fda5ee1b6c957c6da1e6d634ebb770e4a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfC:AylFHUv6ReIt0jSrOA88gC
- TLSH T1C7757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE