General
- Target bd9bfffeaa1e7c0804f066ee3d04014fce0667291144d99dc8fe84a262440ef4
- Size 2.9MB
- Sample260810-hk7brstblg
- SHA256 bd9bfffeaa1e7c0804f066ee3d04014fce0667291144d99dc8fe84a262440ef4
- MD5 8f00e876967b35b438af12209a2249e9
- SHA1 4366847e3e0d64ecb127629de52f6bbb6af7d2d7
- SHA512 1b0d2c0accd6c9ee9bc1ff3bed96e5dc32bf90187ef9c91d5e4e4b592c077863af731f23edbbf3fb8ca4ee2a8595aa17faae366a46ba084841f3f3833cddcaa8
- SSDEEP 49152:gulSYffmO1IslcRDNeEeDz59tgI0+vbrVhy9BXpIuy/HAzIycsHaJP3mKYopgpm:1IaIscNe9D9P50Mb0BXpIJy14vmfhp
- TLSH T197D533592D0CE575EE58087BEF196CE6AA2E9CF4AED3404E0637F79854BC9C0083587E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
bd9bfffeaa1e7c0804f066ee3d04014fce0667291144d99dc8fe84a262440ef4.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
bd9bfffeaa1e7c0804f066ee3d04014fce0667291144d99dc8fe84a262440ef4.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target bd9bfffeaa1e7c0804f066ee3d04014fce0667291144d99dc8fe84a262440ef4
- Size 2.9MB
- SHA256 bd9bfffeaa1e7c0804f066ee3d04014fce0667291144d99dc8fe84a262440ef4
- MD5 8f00e876967b35b438af12209a2249e9
- SHA1 4366847e3e0d64ecb127629de52f6bbb6af7d2d7
- SHA512 1b0d2c0accd6c9ee9bc1ff3bed96e5dc32bf90187ef9c91d5e4e4b592c077863af731f23edbbf3fb8ca4ee2a8595aa17faae366a46ba084841f3f3833cddcaa8
- SSDEEP 49152:gulSYffmO1IslcRDNeEeDz59tgI0+vbrVhy9BXpIuy/HAzIycsHaJP3mKYopgpm:1IaIscNe9D9P50Mb0BXpIJy14vmfhp
- TLSH T197D533592D0CE575EE58087BEF196CE6AA2E9CF4AED3404E0637F79854BC9C0083587E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.