General
- Target 70ebd9ea9645197a2be6476c8aaf34c36ae672f61374dd25560691a50c005018
- Size 22KB
- Sample260808-p3112axcnc
- SHA256 70ebd9ea9645197a2be6476c8aaf34c36ae672f61374dd25560691a50c005018
- MD5 798b13a5be9b30a3502580c1f49501a1
- SHA1 d1f20de0851ed3569e53f072802154650063fecf
- SHA512 63f84148f00cdece6f2f1112c94503a0a4711b69439b7cf05be27db0d85d5bf90cdd1124b341936d93ad3580d20c3c07b17667bdcfcd238507aeb463f05db605
- SSDEEP 384:85o2Qbtj/kfngq+HKhQ01Q04wlLJ4jz7:o+tjsLzhQaQ046sz
- TLSH T174A229561E9505EEF807C57EC2218E2A9831FA30A761A0FF4693933B9C52FD4CA3C2D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
70ebd9ea9645197a2be6476c8aaf34c36ae672f61374dd25560691a50c005018.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
70ebd9ea9645197a2be6476c8aaf34c36ae672f61374dd25560691a50c005018.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 70ebd9ea9645197a2be6476c8aaf34c36ae672f61374dd25560691a50c005018
- Size 22KB
- SHA256 70ebd9ea9645197a2be6476c8aaf34c36ae672f61374dd25560691a50c005018
- MD5 798b13a5be9b30a3502580c1f49501a1
- SHA1 d1f20de0851ed3569e53f072802154650063fecf
- SHA512 63f84148f00cdece6f2f1112c94503a0a4711b69439b7cf05be27db0d85d5bf90cdd1124b341936d93ad3580d20c3c07b17667bdcfcd238507aeb463f05db605
- SSDEEP 384:85o2Qbtj/kfngq+HKhQ01Q04wlLJ4jz7:o+tjsLzhQaQ046sz
- TLSH T174A229561E9505EEF807C57EC2218E2A9831FA30A761A0FF4693933B9C52FD4CA3C2D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE