General
- Target 2850d374b7d2b5305a0e04d935bacac2ff1bc9dfb9fd7d2ed93644ba54d99783
- Size 279KB
- Sample260804-k2yr3abp5y
- SHA256 2850d374b7d2b5305a0e04d935bacac2ff1bc9dfb9fd7d2ed93644ba54d99783
- MD5 ffbd3e3efcbc4d356a559a033d96536e
- SHA1 205adb88c019a291b3a831737c70246fe301d2ba
- SHA512 b0c173f63255008cf61ffb209705772aa897a601e6cc2a2cf865fd3dd2df8a27d061c8fe227c2c14cd226f69eac9c1995ef104978d8e379ed61a1e4241a71e5e
- SSDEEP 3072:IyfzxwiHz9D80gUiftnhBgubUl+aeNanBAvWZ352HMk8/awJcQpzGbrpzytjCruq:IyLxwiHz9dbejgqUldeanOv43AsgUT
- TLSH T1B854D31366CD7CE2C036463037BB87E5DB2DED604BA1C98F96C406A9897C5837532BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2850d374b7d2b5305a0e04d935bacac2ff1bc9dfb9fd7d2ed93644ba54d99783.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2850d374b7d2b5305a0e04d935bacac2ff1bc9dfb9fd7d2ed93644ba54d99783.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2850d374b7d2b5305a0e04d935bacac2ff1bc9dfb9fd7d2ed93644ba54d99783
- Size 279KB
- SHA256 2850d374b7d2b5305a0e04d935bacac2ff1bc9dfb9fd7d2ed93644ba54d99783
- MD5 ffbd3e3efcbc4d356a559a033d96536e
- SHA1 205adb88c019a291b3a831737c70246fe301d2ba
- SHA512 b0c173f63255008cf61ffb209705772aa897a601e6cc2a2cf865fd3dd2df8a27d061c8fe227c2c14cd226f69eac9c1995ef104978d8e379ed61a1e4241a71e5e
- SSDEEP 3072:IyfzxwiHz9D80gUiftnhBgubUl+aeNanBAvWZ352HMk8/awJcQpzGbrpzytjCruq:IyLxwiHz9dbejgqUldeanOv43AsgUT
- TLSH T1B854D31366CD7CE2C036463037BB87E5DB2DED604BA1C98F96C406A9897C5837532BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE