General
- Target 2a25e5c6c442b08c71cb41d544618bfbc6412c34c366a0502ebe93776fd6c1fd
- Size 473KB
- Sample260803-dja5qabl6x
- SHA256 2a25e5c6c442b08c71cb41d544618bfbc6412c34c366a0502ebe93776fd6c1fd
- MD5 8ae32baee4c5dc902ba809e77b1fd99b
- SHA1 ba52f8d2a87c021b27471a3f94dbe66b04f6f095
- SHA512 2b13d4d0cec6e60b6ef570e70b5f492026d26b1568d04d85cfad5eae93225d22c767fab4a08d986c4a9d7de79aa75954b6857d346298b10b561a7b379529d9ca
- SSDEEP 6144:HHU10tcL4hlkjoIpCQBCMLRuWWqfznoYhBDViLdx03cRj2/AO5aJMsxpBQ7W67q1:U1NcG1HBCXW97aVji4xpap7qHV
- TLSH T16AA4AF02B5928077D4B311714A7A9B61D77DB8200F649BEF53D44A7A9F333C0AE36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2a25e5c6c442b08c71cb41d544618bfbc6412c34c366a0502ebe93776fd6c1fd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2a25e5c6c442b08c71cb41d544618bfbc6412c34c366a0502ebe93776fd6c1fd.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2a25e5c6c442b08c71cb41d544618bfbc6412c34c366a0502ebe93776fd6c1fd
- Size 473KB
- SHA256 2a25e5c6c442b08c71cb41d544618bfbc6412c34c366a0502ebe93776fd6c1fd
- MD5 8ae32baee4c5dc902ba809e77b1fd99b
- SHA1 ba52f8d2a87c021b27471a3f94dbe66b04f6f095
- SHA512 2b13d4d0cec6e60b6ef570e70b5f492026d26b1568d04d85cfad5eae93225d22c767fab4a08d986c4a9d7de79aa75954b6857d346298b10b561a7b379529d9ca
- SSDEEP 6144:HHU10tcL4hlkjoIpCQBCMLRuWWqfznoYhBDViLdx03cRj2/AO5aJMsxpBQ7W67q1:U1NcG1HBCXW97aVji4xpap7qHV
- TLSH T16AA4AF02B5928077D4B311714A7A9B61D77DB8200F649BEF53D44A7A9F333C0AE36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application