General
- Target SSZSystemChecker.exe
- Size 95.2MB
- Sample260803-kn98yaeh56
- SHA256 f63eb354b9c1e4d24a689ceefe39973a7271bf38c3ae62a0b120b92fe8a6d0af
- MD5 97442e3676f698d8156beed52a0932c1
- SHA1 439b0dc042b53724f360499daa9d21984bc81705
- SHA512 528f4ae0d25cf49f866d67d943d2080e9ddce83d1ebd9d1cda109ff9df3c8cb73b5a5c6420ffd005d005395d84ae6bd5850ddd18746070e72af81bf0ee255c92
- SSDEEP 1572864:8adeFw8RuFGpGW4d6dXNn9gv4zZ6wf2jrS9YcpI3w7d49QrUalq1:8adedvwW4d6zy6ZlujrS9Yce3md49QrM
- TLSH T134282352E2F900E8D57AC1B8C6675517E7B1345913309BEF76A88A692F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SSZSystemChecker.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SSZSystemChecker.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target SSZSystemChecker.exe
- Size 95.2MB
- SHA256 f63eb354b9c1e4d24a689ceefe39973a7271bf38c3ae62a0b120b92fe8a6d0af
- MD5 97442e3676f698d8156beed52a0932c1
- SHA1 439b0dc042b53724f360499daa9d21984bc81705
- SHA512 528f4ae0d25cf49f866d67d943d2080e9ddce83d1ebd9d1cda109ff9df3c8cb73b5a5c6420ffd005d005395d84ae6bd5850ddd18746070e72af81bf0ee255c92
- SSDEEP 1572864:8adeFw8RuFGpGW4d6dXNn9gv4zZ6wf2jrS9YcpI3w7d49QrUalq1:8adedvwW4d6zy6ZlujrS9Yce3md49QrM
- TLSH T134282352E2F900E8D57AC1B8C6675517E7B1345913309BEF76A88A692F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.