General
- Target powerpointrepairkitinstall.exe
- Size 4.5MB
- Sample260801-pkhrqsvdpc
- SHA256 b17bf42781967bff3e289649f7cf78952843699230311586220f6ac616413277
- MD5 4bce5a337bce56a3763f7a258b07062f
- SHA1 d6b69de6b067f8c9e4c4f47d7f43be194b36ad8e
- SHA512 a8493f18d4d8510130148da2106cc786a686c1b3508a6aeefc12cf3eed97bcbb6d1dc820f67214e233f7a10fde15b8dfc2b0f54bf4f499eb35c0cf7b7016cb1f
- SSDEEP 98304:bkLCyMXPsp3YkZBoJdJpVXDEk3J1MXblA1rFLXydJfheNr4MQEqoFZop:QFo/JpZEH6BWdYr4MQuQp
- TLSH T1C726123FB268713EC5AE4B324577A360997B7A51B91B8C1E07F0484DCF768601E3EA49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
powerpointrepairkitinstall.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
powerpointrepairkitinstall.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target powerpointrepairkitinstall.exe
- Size 4.5MB
- SHA256 b17bf42781967bff3e289649f7cf78952843699230311586220f6ac616413277
- MD5 4bce5a337bce56a3763f7a258b07062f
- SHA1 d6b69de6b067f8c9e4c4f47d7f43be194b36ad8e
- SHA512 a8493f18d4d8510130148da2106cc786a686c1b3508a6aeefc12cf3eed97bcbb6d1dc820f67214e233f7a10fde15b8dfc2b0f54bf4f499eb35c0cf7b7016cb1f
- SSDEEP 98304:bkLCyMXPsp3YkZBoJdJpVXDEk3J1MXblA1rFLXydJfheNr4MQEqoFZop:QFo/JpZEH6BWdYr4MQuQp
- TLSH T1C726123FB268713EC5AE4B324577A360997B7A51B91B8C1E07F0484DCF768601E3EA49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE