General
- Target 8621166d9bc6c6b7e90ad374e699f90a2401cc2b7da29aec6505f5a0816c7d3a
- Size 1.6MB
- Sample260731-kwahaafg56
- SHA256 8621166d9bc6c6b7e90ad374e699f90a2401cc2b7da29aec6505f5a0816c7d3a
- MD5 3e217bda4121bd518f0a2824cecdd5ce
- SHA1 0ec7f01c47e2fb8ca3528ea73b444ac537b7b0c9
- SHA512 5bb869f9860500426c90a8ec7540e2f9a2c8147646dc6c22ef202539e1d4cba4d31d2344e26c83bb731b48c340edef5e0c6fedd39d6d3f67610bd151a9f998da
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQa:AylFHUv6ReIt0jSrOA885
- TLSH T14E757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8621166d9bc6c6b7e90ad374e699f90a2401cc2b7da29aec6505f5a0816c7d3a.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
8621166d9bc6c6b7e90ad374e699f90a2401cc2b7da29aec6505f5a0816c7d3a.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 8621166d9bc6c6b7e90ad374e699f90a2401cc2b7da29aec6505f5a0816c7d3a
- Size 1.6MB
- SHA256 8621166d9bc6c6b7e90ad374e699f90a2401cc2b7da29aec6505f5a0816c7d3a
- MD5 3e217bda4121bd518f0a2824cecdd5ce
- SHA1 0ec7f01c47e2fb8ca3528ea73b444ac537b7b0c9
- SHA512 5bb869f9860500426c90a8ec7540e2f9a2c8147646dc6c22ef202539e1d4cba4d31d2344e26c83bb731b48c340edef5e0c6fedd39d6d3f67610bd151a9f998da
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQa:AylFHUv6ReIt0jSrOA885
- TLSH T14E757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE