General
- Target 25630307126.zip
- Size 13.1MB
- Sample260805-s5j23scb97
- SHA256 462d2b649e073d4c98cc037944d19d640a0c8c6d35e08f0fea2557414eb93390
- MD5 ad1b5c1f2046fb332c51ea4aa51b124c
- SHA1 2dad98ff1ae98a8e397c571a5d85ac075a2c5f30
- SHA512 aecf7e3257b7fe63108eed0e861228c2398df3dbb75cdd25ec42b6fa02d02261d2c0cbbc6af709ff55364e533ef991ef8320cd0d66851c5cda80cef9cb049f84
- SSDEEP 393216:yvfJWykV6De/xX98QVXhFvnI6s5cYuC+RXleH:+MVR5NdzBI6kcYuXl2
- TLSH T101D633C0107698F6D499043BB59C81C3C4F9521FAC289723B76A9F30E077DEE999E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64
- Size 13.3MB
- SHA256 0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64
- MD5 99f52708b06b9c695a8d64a44740bf08
- SHA1 c2743ffc36d2af40ade0e370be52d6b202874114
- SHA512 d0a609f6b2f05939ab82aa5fde1bb0595206653a2ab2ce859a750f71596c4491a8074bb825484e365a4fbcdb820d5de0346e7209ea22214b090b4fe853098dce
- SSDEEP 196608:fLZBJflpQcIIS/Rj7BWl+aV8t8z72BxBwBgO4L6f6psSD5YM4565kIgoOgP2edk:lHlptVYmfr7yBG/4L6f6pXc65kngP1
- TLSH T1A8E63332E494413BFFB604336A65E9203E7DA628274149F6E3C8FD4D3A7219267F7612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory