General
- Target ee44ebd21de0853edf1fd09c16f8f3e6ef98ff7a8a7e3fe18a661c5550a0b429
- Size 10.2MB
- Sample260807-ktfxaa1cnh
- SHA256 ee44ebd21de0853edf1fd09c16f8f3e6ef98ff7a8a7e3fe18a661c5550a0b429
- MD5 2e3db58a3fb95aa34eeb0ec31393d925
- SHA1 a942e2cd49bdaad16081e855c7c2eb169236f2d7
- SHA512 9e8a5708d8406fc1484d94886c659aff9b4e8e21fd4afe8e12ad27ebfcf5ac612a02f87f231b79960dfb7e87662b524312515c7da04d56cf9e6358cb30664e25
- SSDEEP 196608:vOEWx8WYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKO7EAdM:mEWx8WD4F3e+biSDcQwM8uDuEBM
- TLSH T13CB6BF133930EC50E9880B3BD5A7477429BA124864B6C457F70CAE67BF706135B6FA2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ee44ebd21de0853edf1fd09c16f8f3e6ef98ff7a8a7e3fe18a661c5550a0b429.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee44ebd21de0853edf1fd09c16f8f3e6ef98ff7a8a7e3fe18a661c5550a0b429.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ee44ebd21de0853edf1fd09c16f8f3e6ef98ff7a8a7e3fe18a661c5550a0b429
- Size 10.2MB
- SHA256 ee44ebd21de0853edf1fd09c16f8f3e6ef98ff7a8a7e3fe18a661c5550a0b429
- MD5 2e3db58a3fb95aa34eeb0ec31393d925
- SHA1 a942e2cd49bdaad16081e855c7c2eb169236f2d7
- SHA512 9e8a5708d8406fc1484d94886c659aff9b4e8e21fd4afe8e12ad27ebfcf5ac612a02f87f231b79960dfb7e87662b524312515c7da04d56cf9e6358cb30664e25
- SSDEEP 196608:vOEWx8WYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKO7EAdM:mEWx8WD4F3e+biSDcQwM8uDuEBM
- TLSH T13CB6BF133930EC50E9880B3BD5A7477429BA124864B6C457F70CAE67BF706135B6FA2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL