General
- Target e9de0304163e7a7a025d7658b8903053c4159cb5b088cb469928249d6714ab63
- Size 1.1MB
- Sample260810-ldgpbavhna
- SHA256 e9de0304163e7a7a025d7658b8903053c4159cb5b088cb469928249d6714ab63
- MD5 0cd63bd792c70bc3d2faebd88a600e17
- SHA1 d73cd3ec7256c90a279f4a113eff185c779e1738
- SHA512 8d64cbc90fbc59e0f4d1fabc86ba561845219d31180f08cca8646fd966ccd8acb46e38300150b9415e51dcc8ca460d25a38898325e949c94b231ef5c11717e67
- SSDEEP 24576:jX5ce+NuVrsWC+frLv5fvTPa7C/FQy8F6fueNYJL:1pVrsw3v5fR/FQy7/YF
- TLSH T11745D088EC7291D4D82A32BEA983A2405B793C8F5338D74DF811791E59F1CE0EE16776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e9de0304163e7a7a025d7658b8903053c4159cb5b088cb469928249d6714ab63.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
e9de0304163e7a7a025d7658b8903053c4159cb5b088cb469928249d6714ab63.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target e9de0304163e7a7a025d7658b8903053c4159cb5b088cb469928249d6714ab63
- Size 1.1MB
- SHA256 e9de0304163e7a7a025d7658b8903053c4159cb5b088cb469928249d6714ab63
- MD5 0cd63bd792c70bc3d2faebd88a600e17
- SHA1 d73cd3ec7256c90a279f4a113eff185c779e1738
- SHA512 8d64cbc90fbc59e0f4d1fabc86ba561845219d31180f08cca8646fd966ccd8acb46e38300150b9415e51dcc8ca460d25a38898325e949c94b231ef5c11717e67
- SSDEEP 24576:jX5ce+NuVrsWC+frLv5fvTPa7C/FQy8F6fueNYJL:1pVrsw3v5fR/FQy7/YF
- TLSH T11745D088EC7291D4D82A32BEA983A2405B793C8F5338D74DF811791E59F1CE0EE16776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.