General
- Target SecurityHealthHost.exe
- Size 23.3MB
- Sample260810-tj6jmasemf
- SHA256 e509d928f95d72ebc5bc45eb9bb11a2f552e2aa532a2d275528fb822d63ec7be
- MD5 8395f427723276c8b6db9cafc4bbff1a
- SHA1 943aa99a774f352b05e50d06a3efe027d72617b9
- SHA512 2c4e9252af0a262cce1df8439b0fe6e1ac1502539d560d7379e6d5e72fb63b2022d9f74beb19b24b1dbd585b0fedf38f75d1af1ad5e07a1b86e18198d936cbc6
- SSDEEP 393216:girZF4vRTy/9OIkDesQEUA14iLlyt+aW3hwF5rDbFh1+1f0p78yn+O8MUg:DZF4Zu/9OIkDe1A14UygaWhwFB/14Mig
- TLSH T12837331123E80696D2FF8FB9C57008D2CB71B626568AEB4F3C8CB0DD1B62781AD61757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecurityHealthHost.exe
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SecurityHealthHost.exe
- Size 23.3MB
- SHA256 e509d928f95d72ebc5bc45eb9bb11a2f552e2aa532a2d275528fb822d63ec7be
- MD5 8395f427723276c8b6db9cafc4bbff1a
- SHA1 943aa99a774f352b05e50d06a3efe027d72617b9
- SHA512 2c4e9252af0a262cce1df8439b0fe6e1ac1502539d560d7379e6d5e72fb63b2022d9f74beb19b24b1dbd585b0fedf38f75d1af1ad5e07a1b86e18198d936cbc6
- SSDEEP 393216:girZF4vRTy/9OIkDesQEUA14iLlyt+aW3hwF5rDbFh1+1f0p78yn+O8MUg:DZF4Zu/9OIkDe1A14UygaWhwFB/14Mig
- TLSH T12837331123E80696D2FF8FB9C57008D2CB71B626568AEB4F3C8CB0DD1B62781AD61757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger