General
- Target 2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797.zip
- Size 2.1MB
- Sample260805-teqydabq71
- SHA256 bc7a8eeb22d26e8d69fe4f4bb7bd2e9208dde84d9389b97112fe19f52edd67c8
- MD5 b523990d8f828432a7236db8c8db84e3
- SHA1 3c69cf1c627d6b62e8e8dcda0b0bc4bc2f39794b
- SHA512 df6c9786837676b725066487bb3e3162a08bfa4391495395bea9df2bc3ad08767f3b00a1fbd26edaaf4f25ceb8a8411147cff490a18a9f5507023b5092ccf863
- SSDEEP 49152:oiEJjsMWOVwY38TUt7lO34Na+njDBqh4n5R8j2Ij7dKbpwT1M0:oiEJjsMWOVwLIc+jdq8nIN6pw5N
- TLSH T1C0A5335ED770DF085CF4959E8B07C299335A3316A4379D824B9723F95ADBE1AC2CC412
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797
- Size 3.4MB
- SHA256 2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797
- MD5 1e98c82f8bd02d351150abfe4c0b3e17
- SHA1 33e50493986a8fcfcc41be279cfc299004960dde
- SHA512 2facfde78204490b1d93815213c66a76fbef444d3cd4ef4807107207d77c25e23f0cf0476fab37d124ddd79a99ac6c78289622a63ca954e56dded3ab2cb70ebc
- SSDEEP 98304:JemayLuC6dtasXAQb84gi4zgcBvCHVaoj+3:JeLBXAQb8TNEcBvCHVaoj+
- TLSH T150F5BE16A26400A9D066CDB8C91A1937E7777C4527246BDF1790B6A63FB3BE0DF3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Detect suspicious telegram bot
Detect suspicious telegram bot.