General
- Target cf851b97d9be11a980e08c94fc6544da4c79f02716f45ecc5f91af413ec8f6c0
- Size 1.6MB
- Sample260810-j18efadp3x
- SHA256 cf851b97d9be11a980e08c94fc6544da4c79f02716f45ecc5f91af413ec8f6c0
- MD5 a48a898ebdf24934243c0976aa8a4c5c
- SHA1 191e03c6ccb83d266948ac3e85680d6c10d8d663
- SHA512 42d868b30d5f654d746efb1471d5ae6d7af7f1f6fab3c98a29f42a6a42ed05ec4a59a534154fcb52d2554c977041b6781c5553d30cc4993a4dc56857054b5105
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQX:AylFHUv6ReIt0jSrOA884
- TLSH T1A5757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cf851b97d9be11a980e08c94fc6544da4c79f02716f45ecc5f91af413ec8f6c0.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf851b97d9be11a980e08c94fc6544da4c79f02716f45ecc5f91af413ec8f6c0.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target cf851b97d9be11a980e08c94fc6544da4c79f02716f45ecc5f91af413ec8f6c0
- Size 1.6MB
- SHA256 cf851b97d9be11a980e08c94fc6544da4c79f02716f45ecc5f91af413ec8f6c0
- MD5 a48a898ebdf24934243c0976aa8a4c5c
- SHA1 191e03c6ccb83d266948ac3e85680d6c10d8d663
- SHA512 42d868b30d5f654d746efb1471d5ae6d7af7f1f6fab3c98a29f42a6a42ed05ec4a59a534154fcb52d2554c977041b6781c5553d30cc4993a4dc56857054b5105
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQX:AylFHUv6ReIt0jSrOA884
- TLSH T1A5757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE