General
- Target meccha-camouflage-v1.7.2.exe
- Size 54.4MB
- Sample260801-mg91pssfkd
- SHA256 2e3364b4a9d3557bfe9d53cdc080ec1d29777c7414d593ed1c8cd4f0567683f6
- MD5 5f87f5096af635f2b9ad45f61f74a633
- SHA1 3456cb117240c2a598669052bdfb6195192d8904
- SHA512 03998fe6d13b927d6c0609cbd7c5a45b18e7cfb08f33620329469df2a9f6345e5525072352978f50c516ecf3264d54a7e8a5ec34551311869ef19127ca83f1c7
- SSDEEP 786432:7GkNIz+9/iw0xLirqXvO8haD4Gh20iXznslab6JYH2CaTONbnkq1PyKQlSpYo2en:73rawvu5hMw0+WU2CaTYkq1PyKwBeNOs
- TLSH T19FC72256E2FD00E8D4BBC1B8C6574627EBB2345513305BEB26A48A252F37BE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
meccha-camouflage-v1.7.2.exe
Resource
win10ltsc2021-20260513-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target meccha-camouflage-v1.7.2.exe
- Size 54.4MB
- SHA256 2e3364b4a9d3557bfe9d53cdc080ec1d29777c7414d593ed1c8cd4f0567683f6
- MD5 5f87f5096af635f2b9ad45f61f74a633
- SHA1 3456cb117240c2a598669052bdfb6195192d8904
- SHA512 03998fe6d13b927d6c0609cbd7c5a45b18e7cfb08f33620329469df2a9f6345e5525072352978f50c516ecf3264d54a7e8a5ec34551311869ef19127ca83f1c7
- SSDEEP 786432:7GkNIz+9/iw0xLirqXvO8haD4Gh20iXznslab6JYH2CaTONbnkq1PyKQlSpYo2en:73rawvu5hMw0+WU2CaTYkq1PyKwBeNOs
- TLSH T19FC72256E2FD00E8D4BBC1B8C6574627EBB2345513305BEB26A48A252F37BE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.