General
- Target 4bf86f958656e050847092f45318e1baba675021eaa9f62c96983f141ad1bf70
- Size 508KB
- Sample260808-wdtzrasamb
- SHA256 4bf86f958656e050847092f45318e1baba675021eaa9f62c96983f141ad1bf70
- MD5 bd17391a769fe4e681befceef02c80a4
- SHA1 c27c8d7307b4438ffa171c70ab1941a7fe88bb59
- SHA512 8a39d4f9bedbd791eb1bac670a75864f3847e456aeaa47e6b2402863806ac823dd549f358e6d3cfc792d0fb05617e9fb47766d87ec1d99b4756f991fce9b8f10
- SSDEEP 6144:vW0J07EHxsWKKCbrZXDbI33z5P/kjguInr39tAOLPvI1ILz:O4CWKKCrZTGF/k8uMxtxPvvz
- TLSH T199B49D01FBB6C1B2C99741B40C69D71E6231BA4817354BE7FBC81F5E8E613C1AE7624A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4bf86f958656e050847092f45318e1baba675021eaa9f62c96983f141ad1bf70.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
4bf86f958656e050847092f45318e1baba675021eaa9f62c96983f141ad1bf70.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 4bf86f958656e050847092f45318e1baba675021eaa9f62c96983f141ad1bf70
- Size 508KB
- SHA256 4bf86f958656e050847092f45318e1baba675021eaa9f62c96983f141ad1bf70
- MD5 bd17391a769fe4e681befceef02c80a4
- SHA1 c27c8d7307b4438ffa171c70ab1941a7fe88bb59
- SHA512 8a39d4f9bedbd791eb1bac670a75864f3847e456aeaa47e6b2402863806ac823dd549f358e6d3cfc792d0fb05617e9fb47766d87ec1d99b4756f991fce9b8f10
- SSDEEP 6144:vW0J07EHxsWKKCbrZXDbI33z5P/kjguInr39tAOLPvI1ILz:O4CWKKCrZTGF/k8uMxtxPvvz
- TLSH T199B49D01FBB6C1B2C99741B40C69D71E6231BA4817354BE7FBC81F5E8E613C1AE7624A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.