General
- Target DragonBurn.exe
- Size 1.2MB
- Sample260809-pabknsac77
- SHA256 092a6c3df65f4c55132bbc6f0914a10a68eb793e77995f307f9295eab1251162
- MD5 2bf1aaa7e2ccb6b2f7c6cc5d7200a95e
- SHA1 61e8e5dd4b0431cebe024b040dfd1a86f898f791
- SHA512 7856649c59d77e9a25f6bada8ae377d1c14905d164868c2d8a4f21f580129026ab600ef9bce9b92681122c8206f658cfe5b8eb16c2d9def44a7cd74aa8cd020b
- SSDEEP 24576:Qor0uON3thfqrrPC1CgLOFtn/a3LqxkXdcskZ27asTohZxB2:QO0zVy/T/3CkZ2HsZ72
- TLSH T1EF45230CC46C5A7DE024423DC6AF6116B195FE323D806B95F0FCA9A797328D63385BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DragonBurn.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
DragonBurn.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
out.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
out.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target DragonBurn.exe
- Size 1.2MB
- SHA256 092a6c3df65f4c55132bbc6f0914a10a68eb793e77995f307f9295eab1251162
- MD5 2bf1aaa7e2ccb6b2f7c6cc5d7200a95e
- SHA1 61e8e5dd4b0431cebe024b040dfd1a86f898f791
- SHA512 7856649c59d77e9a25f6bada8ae377d1c14905d164868c2d8a4f21f580129026ab600ef9bce9b92681122c8206f658cfe5b8eb16c2d9def44a7cd74aa8cd020b
- SSDEEP 24576:Qor0uON3thfqrrPC1CgLOFtn/a3LqxkXdcskZ27asTohZxB2:QO0zVy/T/3CkZ2HsZ72
- TLSH T1EF45230CC46C5A7DE024423DC6AF6116B195FE323D806B95F0FCA9A797328D63385BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
- Target out.upx
- Size 139KB
- SHA256 9afb1e3b82523b3619c22685c9d5421b1cffa1f4fd259092ad2b50c5382d8ef5
- MD5 b270b31eae4dc044298d83abd08f2513
- SHA1 335ff9960a26bb0a5779f048b75f230a768e1f7f
- SHA512 91ebd5169544479d04d3ed1722aef26d31d38253dee18086ebc33ec24bf840052d9c6e82934a5e33bafbb6b2224ffce4b543d5d9d5f9632a3f1d069eb27635eb
- SSDEEP 3072:CBBT19PQplqQA/lf+o7/b8pzFZ7GwCuRw1usPfnJalXsWTfHWnRl0Y:CLTHQOrRezFWuRwIunJ+FH0N
- TLSH T1F1D3BF0377D2C5F8E1E2167049853BA629FAF7340F258AC79B840D069AB57D4EB3D386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10