General
- Target RipehookLoader.exe
- Size 154.6MB
- Sample260803-anaszahn7v
- SHA256 cbd7716b00337354a22e000e070c622ccd37b6b144088349e452a1ccd24492c9
- MD5 7b5375c3c242aaf64f3788a813afea3d
- SHA1 8a3a1134c15b3003602c663bf3277e6178df1291
- SHA512 676ea77f30c5a4123ad7677ed966b2b0506efd7d5430357688f4037d1f064bf36d500fb739611ccc23148b2b8fa734bef81550eea374b006b6015182d3878f37
- SSDEEP 786432:YuMLFQSx8OA83yg1Yg1WV5OtsFktaPxNvsCMTc15MZjX0DRy77fB:Y5SSx8VqHFWqAuCOc15MBvzB
- TLSH T15E787C1163E85A05E27B8678977382A1E6B1BC535711C1CF0494FE4A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RipehookLoader.exe
Resource
win10v2004-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
RipehookLoader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
300 seconds
Malware Config
Targets
-
- Target RipehookLoader.exe
- Size 154.6MB
- SHA256 cbd7716b00337354a22e000e070c622ccd37b6b144088349e452a1ccd24492c9
- MD5 7b5375c3c242aaf64f3788a813afea3d
- SHA1 8a3a1134c15b3003602c663bf3277e6178df1291
- SHA512 676ea77f30c5a4123ad7677ed966b2b0506efd7d5430357688f4037d1f064bf36d500fb739611ccc23148b2b8fa734bef81550eea374b006b6015182d3878f37
- SSDEEP 786432:YuMLFQSx8OA83yg1Yg1WV5OtsFktaPxNvsCMTc15MZjX0DRy77fB:Y5SSx8VqHFWqAuCOc15MBvzB
- TLSH T15E787C1163E85A05E27B8678977382A1E6B1BC535711C1CF0494FE4A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Loads dropped DLL