General
- Target dfsd.exe
- Size 3.2MB
- Sample260803-s92spabg28
- SHA256 7cfd233c86bc4f9eda3d6bd83dba7bf533da6cdc930bf6b45f35881e2384358e
- MD5 0a28d4725aaca45d1fc2e527da4c1413
- SHA1 7f53b4273b9c8dc183ca10b1529e261401d1862e
- SHA512 c0b6cb3e66f05bb1598ce951a2eab71ecf82b78e643550259a1fc91adfb8ef306ac66011ffbd991d6fe89e89a4f83c97406283009e722eb77df9aa5080940d73
- SSDEEP 49152:zgTbH94Yx5xNhoum9V+bGT12fv8VhFzvnq5aOvbFyWHXfhtbZY3dC00ko5bOGRF5:s22hoNiST1AyvzfjOvhfTV6dLo5H35
- TLSH T129F52309D7E504F8D1B3E678CE968912D777784A4372E39F03EC59A60F73690893AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dfsd.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfsd.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target dfsd.exe
- Size 3.2MB
- SHA256 7cfd233c86bc4f9eda3d6bd83dba7bf533da6cdc930bf6b45f35881e2384358e
- MD5 0a28d4725aaca45d1fc2e527da4c1413
- SHA1 7f53b4273b9c8dc183ca10b1529e261401d1862e
- SHA512 c0b6cb3e66f05bb1598ce951a2eab71ecf82b78e643550259a1fc91adfb8ef306ac66011ffbd991d6fe89e89a4f83c97406283009e722eb77df9aa5080940d73
- SSDEEP 49152:zgTbH94Yx5xNhoum9V+bGT12fv8VhFzvnq5aOvbFyWHXfhtbZY3dC00ko5bOGRF5:s22hoNiST1AyvzfjOvhfTV6dLo5H35
- TLSH T129F52309D7E504F8D1B3E678CE968912D777784A4372E39F03EC59A60F73690893AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE