General
- Target ef4f591098c035f6ad3c019134bad57a25826dbbecd6168c63c92481e1a3671c
- Size 1.6MB
- Sample260803-m8nlsavgqa
- SHA256 ef4f591098c035f6ad3c019134bad57a25826dbbecd6168c63c92481e1a3671c
- MD5 2ad1d44adab935328043603c3acfdba2
- SHA1 f6e0cd088ce5e46e245ad556792b36a60614100a
- SHA512 d8dcbf3b536957a689562e136c4f9d6398fad0997212e64aacad3ebe920f7227a2b654ddf025147a2664c5c9ce4af4e2ab49c7505ca039b2dc31efe3b7f826f9
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfh:AylFHUv6ReIt0jSrOA88gh
- TLSH T162758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef4f591098c035f6ad3c019134bad57a25826dbbecd6168c63c92481e1a3671c.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef4f591098c035f6ad3c019134bad57a25826dbbecd6168c63c92481e1a3671c.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ef4f591098c035f6ad3c019134bad57a25826dbbecd6168c63c92481e1a3671c
- Size 1.6MB
- SHA256 ef4f591098c035f6ad3c019134bad57a25826dbbecd6168c63c92481e1a3671c
- MD5 2ad1d44adab935328043603c3acfdba2
- SHA1 f6e0cd088ce5e46e245ad556792b36a60614100a
- SHA512 d8dcbf3b536957a689562e136c4f9d6398fad0997212e64aacad3ebe920f7227a2b654ddf025147a2664c5c9ce4af4e2ab49c7505ca039b2dc31efe3b7f826f9
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfh:AylFHUv6ReIt0jSrOA88gh
- TLSH T162758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE