General
- Target tdrv22.exe
- Size 28.2MB
- Sample260809-pjt4daep4t
- SHA256 5ad3eebea139742e96883ff9944a267bb0675b959ea4ce2ba0a513173e41d0b0
- MD5 2c80854ca8d12711f4fc414ad6c9c053
- SHA1 455205ac52482118ac3c6323152d64a94241e915
- SHA512 d3e945c424c5398b11617e1cabfaa71b576c339efe892ac5618b013b4a24207bcf3e333ccbd423eecc24a8977b61b838da7446ef6f1061df9b13d19a8eb32038
- SSDEEP 786432:T9pI1HltT+4J5M7IJQUgttNgGMV+l4JDwM4Zx09DlQW:TAHL/5D5gxfMBJMzx0vr
- TLSH T11557130BB0D741BDD8A74CF27AAB60464736B16A3AE86E68F6D0CF0679755433C8C139
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tdrv22.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target tdrv22.exe
- Size 28.2MB
- SHA256 5ad3eebea139742e96883ff9944a267bb0675b959ea4ce2ba0a513173e41d0b0
- MD5 2c80854ca8d12711f4fc414ad6c9c053
- SHA1 455205ac52482118ac3c6323152d64a94241e915
- SHA512 d3e945c424c5398b11617e1cabfaa71b576c339efe892ac5618b013b4a24207bcf3e333ccbd423eecc24a8977b61b838da7446ef6f1061df9b13d19a8eb32038
- SSDEEP 786432:T9pI1HltT+4J5M7IJQUgttNgGMV+l4JDwM4Zx09DlQW:TAHL/5D5gxfMBJMzx0vr
- TLSH T11557130BB0D741BDD8A74CF27AAB60464736B16A3AE86E68F6D0CF0679755433C8C139
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.