General
- Target 632cc60d5c6cae9e0b3ae8a16de1b1f56259e3f077ee6eb2a48e5bd1147e9523
- Size 1.6MB
- Sample260810-mgfrvs1wgz
- SHA256 632cc60d5c6cae9e0b3ae8a16de1b1f56259e3f077ee6eb2a48e5bd1147e9523
- MD5 c93c1256024ff241a711e1af6bbfbeee
- SHA1 2629701ca9fc050454590bae3696dd73f2abe043
- SHA512 96c2a4a6acd94c869e4aea4723814fab71dcdbd60799488ed2a7776a6a51adf8de37dfe16b102c7ef9483502450884ce0f8c051b175c813f0233b9fc62cab25b
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfe:AylFHUv6ReIt0jSrOA88ge
- TLSH T1E8757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
632cc60d5c6cae9e0b3ae8a16de1b1f56259e3f077ee6eb2a48e5bd1147e9523.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
632cc60d5c6cae9e0b3ae8a16de1b1f56259e3f077ee6eb2a48e5bd1147e9523.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 632cc60d5c6cae9e0b3ae8a16de1b1f56259e3f077ee6eb2a48e5bd1147e9523
- Size 1.6MB
- SHA256 632cc60d5c6cae9e0b3ae8a16de1b1f56259e3f077ee6eb2a48e5bd1147e9523
- MD5 c93c1256024ff241a711e1af6bbfbeee
- SHA1 2629701ca9fc050454590bae3696dd73f2abe043
- SHA512 96c2a4a6acd94c869e4aea4723814fab71dcdbd60799488ed2a7776a6a51adf8de37dfe16b102c7ef9483502450884ce0f8c051b175c813f0233b9fc62cab25b
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfe:AylFHUv6ReIt0jSrOA88ge
- TLSH T1E8757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE