General
- Target 21c306b4b920f535f48cd515aafddd1755c157f55944d8a5b16236018e8ea149
- Size 1.6MB
- Sample260802-w361lsvxh1
- SHA256 21c306b4b920f535f48cd515aafddd1755c157f55944d8a5b16236018e8ea149
- MD5 d8ee7c9b7901b6c06fe3a76ddc19f306
- SHA1 f237d496db6373f3e8b9d6421134808c1898203c
- SHA512 bffcc17d2dbbfbbbfdb75930ded474f5d18cd1114efa288892abe60537e1ccc2c1fc3cdabed9cdf40f36d0ddc06f6a854c0ad0b2ed0e6b5c28ebb470fb1f18e9
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfm:AylFHUv6ReIt0jSrOA88gm
- TLSH T131757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21c306b4b920f535f48cd515aafddd1755c157f55944d8a5b16236018e8ea149.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
21c306b4b920f535f48cd515aafddd1755c157f55944d8a5b16236018e8ea149.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 21c306b4b920f535f48cd515aafddd1755c157f55944d8a5b16236018e8ea149
- Size 1.6MB
- SHA256 21c306b4b920f535f48cd515aafddd1755c157f55944d8a5b16236018e8ea149
- MD5 d8ee7c9b7901b6c06fe3a76ddc19f306
- SHA1 f237d496db6373f3e8b9d6421134808c1898203c
- SHA512 bffcc17d2dbbfbbbfdb75930ded474f5d18cd1114efa288892abe60537e1ccc2c1fc3cdabed9cdf40f36d0ddc06f6a854c0ad0b2ed0e6b5c28ebb470fb1f18e9
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfm:AylFHUv6ReIt0jSrOA88gm
- TLSH T131757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE