General
- Target c60a6b5afc5c4fe096841b137907db3d33ee642e9d1cbd5c72596dac695812f5
- Size 2.3MB
- Sample260810-mpzvpsfe72
- SHA256 c60a6b5afc5c4fe096841b137907db3d33ee642e9d1cbd5c72596dac695812f5
- MD5 88fa6c3e55009236059c8c9256b5bdb2
- SHA1 464151b6b73404689e7af32e3e8f5aeb32b4d885
- SHA512 dd9e71c7e1d946217618fb7b2e3956e2f23302e7dede2faaeb70c9e4105d52f053168ebdc2d2d511f0f30c709cd3993d774d70b3d996bde53ff5139a8b8efe8f
- SSDEEP 49152:TaeANSovXmkr87pd6QcBn9N4P0OxvDbtWqVdR/bZLa7m/fLww:lOTfgNExN4boq/NVfLww
- TLSH T175B5F12322A14092F1F25931867A6EB47AF276A54C71D87F43E9DCD42E237E0EB12747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c60a6b5afc5c4fe096841b137907db3d33ee642e9d1cbd5c72596dac695812f5.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
c60a6b5afc5c4fe096841b137907db3d33ee642e9d1cbd5c72596dac695812f5.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target c60a6b5afc5c4fe096841b137907db3d33ee642e9d1cbd5c72596dac695812f5
- Size 2.3MB
- SHA256 c60a6b5afc5c4fe096841b137907db3d33ee642e9d1cbd5c72596dac695812f5
- MD5 88fa6c3e55009236059c8c9256b5bdb2
- SHA1 464151b6b73404689e7af32e3e8f5aeb32b4d885
- SHA512 dd9e71c7e1d946217618fb7b2e3956e2f23302e7dede2faaeb70c9e4105d52f053168ebdc2d2d511f0f30c709cd3993d774d70b3d996bde53ff5139a8b8efe8f
- SSDEEP 49152:TaeANSovXmkr87pd6QcBn9N4P0OxvDbtWqVdR/bZLa7m/fLww:lOTfgNExN4boq/NVfLww
- TLSH T175B5F12322A14092F1F25931867A6EB47AF276A54C71D87F43E9DCD42E237E0EB12747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.