General
- Target 49a6c8f79d272b7f94a4bd5d46507c4e6df8a3eafdef82fc7e95050e9ff4e7ac
- Size 274KB
- Sample260804-rfrj7agl2s
- SHA256 49a6c8f79d272b7f94a4bd5d46507c4e6df8a3eafdef82fc7e95050e9ff4e7ac
- MD5 a98c903d9e9ca50aa931699572660b02
- SHA1 e64a031c2a07b83d588728b76094ff48abedd82f
- SHA512 a0c51196960dcc9f1382a54085ffbc972db9238dc68c93bc1a12f661045419ae47d91eabd1b90d6a943533a7ac1e5d7b4a18b2d88fa5f811396eb6ccbebfac98
- SSDEEP 6144:NTSQ/yYCOOnxaZ4VHzo3S2AeA5INu6UI1:NTSG+OOn4698pdNX
- TLSH T19154D413A6DC7CE2C036463033BB87E1D72DED604B91C58F96D406A99A3C5937632BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
49a6c8f79d272b7f94a4bd5d46507c4e6df8a3eafdef82fc7e95050e9ff4e7ac.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
49a6c8f79d272b7f94a4bd5d46507c4e6df8a3eafdef82fc7e95050e9ff4e7ac.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 49a6c8f79d272b7f94a4bd5d46507c4e6df8a3eafdef82fc7e95050e9ff4e7ac
- Size 274KB
- SHA256 49a6c8f79d272b7f94a4bd5d46507c4e6df8a3eafdef82fc7e95050e9ff4e7ac
- MD5 a98c903d9e9ca50aa931699572660b02
- SHA1 e64a031c2a07b83d588728b76094ff48abedd82f
- SHA512 a0c51196960dcc9f1382a54085ffbc972db9238dc68c93bc1a12f661045419ae47d91eabd1b90d6a943533a7ac1e5d7b4a18b2d88fa5f811396eb6ccbebfac98
- SSDEEP 6144:NTSQ/yYCOOnxaZ4VHzo3S2AeA5INu6UI1:NTSG+OOn4698pdNX
- TLSH T19154D413A6DC7CE2C036463033BB87E1D72DED604B91C58F96D406A99A3C5937632BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE