General
- Target 4a6f4075e126e9595c6a7a42f879c7f58573a8eac6ce0089706d30ac59a71d8c
- Size 268KB
- Sample260804-s4r2astdqa
- SHA256 4a6f4075e126e9595c6a7a42f879c7f58573a8eac6ce0089706d30ac59a71d8c
- MD5 35b14709e543fb01904c76bd063d0c11
- SHA1 936675bd9194bb0fe09bcb058002f760ff5b40af
- SHA512 a5050842edbbb458c5c6b559c3c2cd5dde30a09f76ba9f1292d9f651a26d601bc899d8162d8890291bebab9a2886219f352739c8137fb7916fc0aec5d81ea7b3
- SSDEEP 3072:BhYnYzIHYP5rWmUJAYnDUl9xeY8Z5ZHWvgC51NHi/eeVYmk/e3ycwCrd3:BhYyI4Rr1UAwUF78Z7H6gCt12pz
- TLSH T1A544C4136ADC7CE2C035563037BB87E1DB2EED604B91C58F96C406A58A3C5937632BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a6f4075e126e9595c6a7a42f879c7f58573a8eac6ce0089706d30ac59a71d8c.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a6f4075e126e9595c6a7a42f879c7f58573a8eac6ce0089706d30ac59a71d8c.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 4a6f4075e126e9595c6a7a42f879c7f58573a8eac6ce0089706d30ac59a71d8c
- Size 268KB
- SHA256 4a6f4075e126e9595c6a7a42f879c7f58573a8eac6ce0089706d30ac59a71d8c
- MD5 35b14709e543fb01904c76bd063d0c11
- SHA1 936675bd9194bb0fe09bcb058002f760ff5b40af
- SHA512 a5050842edbbb458c5c6b559c3c2cd5dde30a09f76ba9f1292d9f651a26d601bc899d8162d8890291bebab9a2886219f352739c8137fb7916fc0aec5d81ea7b3
- SSDEEP 3072:BhYnYzIHYP5rWmUJAYnDUl9xeY8Z5ZHWvgC51NHi/eeVYmk/e3ycwCrd3:BhYyI4Rr1UAwUF78Z7H6gCt12pz
- TLSH T1A544C4136ADC7CE2C035563037BB87E1DB2EED604B91C58F96C406A58A3C5937632BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE