General
- Target Office_2024_EN_64Bits.exe
- Size 3.4MB
- Sample260801-pflylaan2t
- SHA256 04c3c5cf2f26c10a82444d4f9498557c89a4521331dace6427a1eb035327d605
- MD5 79dda55ff521d810eb573385a3d199be
- SHA1 35bbd616d043182317254929d436dce01e980203
- SHA512 bda342cb122eb8462e1407f33789b8103fdf4b00182512403987fe06f4e34e5ac07d7b6a40291eeb1621e5d75d928b04a1571d1d244e2fc9c8ec40b350ccf27b
- SSDEEP 98304:2Eou88dAT+XHnlFmP6spyLFuSvoQJa9TBqB5nbEx5e3t:2LByHnlPVpuZv9Yvb6e3t
- TLSH T10DF53305776504B9D4660AF9813AE950CFBAF013ADF0CC0F73A8529D2E92786E5B2F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Office_2024_EN_64Bits.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Office_2024_EN_64Bits.exe
- Size 3.4MB
- SHA256 04c3c5cf2f26c10a82444d4f9498557c89a4521331dace6427a1eb035327d605
- MD5 79dda55ff521d810eb573385a3d199be
- SHA1 35bbd616d043182317254929d436dce01e980203
- SHA512 bda342cb122eb8462e1407f33789b8103fdf4b00182512403987fe06f4e34e5ac07d7b6a40291eeb1621e5d75d928b04a1571d1d244e2fc9c8ec40b350ccf27b
- SSDEEP 98304:2Eou88dAT+XHnlFmP6spyLFuSvoQJa9TBqB5nbEx5e3t:2LByHnlPVpuZv9Yvb6e3t
- TLSH T10DF53305776504B9D4660AF9813AE950CFBAF013ADF0CC0F73A8529D2E92786E5B2F71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory