General
- Target ef64eeb49ee823b0ce5136cde988d9c70a97203ac7a686c1208eb977dc2a7519
- Size 1.2MB
- Sample260803-rhphls1gpc
- SHA256 ef64eeb49ee823b0ce5136cde988d9c70a97203ac7a686c1208eb977dc2a7519
- MD5 62f2ce1bc65f3c0b458cc425911f5c2f
- SHA1 860cf94cf38407c7c5b2f3f713b59205b24fdf31
- SHA512 8a46596a785ea62617f6e337a842e6682b0eb6b4a4492072c861a75804e3af104829fea7358afde5eb4c3983746b8b4429ff3f6a592dfa94aa8c89213e59e185
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhY:AylFHUv6ReIt0jSrOk
- TLSH T1B4457D12765D81B1D19C14702D6F7336A9306A193B36CEE3B3D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef64eeb49ee823b0ce5136cde988d9c70a97203ac7a686c1208eb977dc2a7519.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef64eeb49ee823b0ce5136cde988d9c70a97203ac7a686c1208eb977dc2a7519.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ef64eeb49ee823b0ce5136cde988d9c70a97203ac7a686c1208eb977dc2a7519
- Size 1.2MB
- SHA256 ef64eeb49ee823b0ce5136cde988d9c70a97203ac7a686c1208eb977dc2a7519
- MD5 62f2ce1bc65f3c0b458cc425911f5c2f
- SHA1 860cf94cf38407c7c5b2f3f713b59205b24fdf31
- SHA512 8a46596a785ea62617f6e337a842e6682b0eb6b4a4492072c861a75804e3af104829fea7358afde5eb4c3983746b8b4429ff3f6a592dfa94aa8c89213e59e185
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhY:AylFHUv6ReIt0jSrOk
- TLSH T1B4457D12765D81B1D19C14702D6F7336A9306A193B36CEE3B3D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE