General
- Target cabal.exe
- Size 100KB
- Sample260804-bmewzaaf29
- SHA256 e1f22e870f1d84e0c49514875f862d5ac1eb280d8a507bef46cf1c1104d9c47f
- MD5 b48f59e025e8dd815cc8ad9e9b640832
- SHA1 ac451202c269d6a9b75546b890f478d857855aed
- SHA512 79b6715bdd321fc2d9b503e3de01a11599dabfed7077eb81a2e7e3e3cefda517d1e3c75b3e982d949c8ed6405265b464cbee5adf3b7eaf3191613b323ea43903
- SSDEEP 1536:WTqhFGarX4iHzZHJqtBy3db4qThUtjGtv4n4PZHJqtBy3db3ZHVNtB83dbD:WTqhoeX4iTtktGFdcGNtktGVtXtY9
- TLSH T193A39D1133D8C62DC22A0774A8F2D7793674A642F966CB0D8AE05D8FB8737424D672B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cabal.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
cabal.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target cabal.exe
- Size 100KB
- SHA256 e1f22e870f1d84e0c49514875f862d5ac1eb280d8a507bef46cf1c1104d9c47f
- MD5 b48f59e025e8dd815cc8ad9e9b640832
- SHA1 ac451202c269d6a9b75546b890f478d857855aed
- SHA512 79b6715bdd321fc2d9b503e3de01a11599dabfed7077eb81a2e7e3e3cefda517d1e3c75b3e982d949c8ed6405265b464cbee5adf3b7eaf3191613b323ea43903
- SSDEEP 1536:WTqhFGarX4iHzZHJqtBy3db4qThUtjGtv4n4PZHJqtBy3db3ZHVNtB83dbD:WTqhoeX4iTtktGFdcGNtktGVtXtY9
- TLSH T193A39D1133D8C62DC22A0774A8F2D7793674A642F966CB0D8AE05D8FB8737424D672B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE