General
- Target Cheker.exe
- Size 7.0MB
- Sample260808-g8gkkscb95
- SHA256 7f83182c50f1071dc7dd2db9718804349a0cf9de19e56f5d0e28230d83fffb4f
- MD5 bdd20e0dd70923d76a822784253ff162
- SHA1 1f1a2f8bcc58a175f207aea49d05bf19fc8bd283
- SHA512 2e1c5e3b17e6212bdf81fafc673e65228022b8773aa0569639bb6f40d971438037e969c1f4bfdfcf82dd1dea19bd32f38e9e61a8fcdf411a4b5ae253fbbef02d
- SSDEEP 98304:7ktiYkwt4pdBWYxz3CeaFOumvBh8huTAE:7bdwt4pjnt3CFE
- TLSH T1AD763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cheker.exe
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
Cheker.exe
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target Cheker.exe
- Size 7.0MB
- SHA256 7f83182c50f1071dc7dd2db9718804349a0cf9de19e56f5d0e28230d83fffb4f
- MD5 bdd20e0dd70923d76a822784253ff162
- SHA1 1f1a2f8bcc58a175f207aea49d05bf19fc8bd283
- SHA512 2e1c5e3b17e6212bdf81fafc673e65228022b8773aa0569639bb6f40d971438037e969c1f4bfdfcf82dd1dea19bd32f38e9e61a8fcdf411a4b5ae253fbbef02d
- SSDEEP 98304:7ktiYkwt4pdBWYxz3CeaFOumvBh8huTAE:7bdwt4pjnt3CFE
- TLSH T1AD763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.