General
- Target MegelinaProLoader.rar
- Size 67KB
- Sample260810-xwtx5sab33
- SHA256 5e695e025301984fca9e6577658c14938dd31c129be3585f3b6e297ffff0663d
- MD5 8effff0c6760bdc2d4554f02ba3011b4
- SHA1 936330206359c0f51ea298a011d8c462330b1ba5
- SHA512 c1316e7d27cde30cbc68e92447a1b6de992594b94130154c2a22741ee0402219a648591f7966adf6f827ee0ae1da6f2e436bb690597559343e935150a85d412e
- SSDEEP 1536:AV5xna+6c5pcENyYZpeVze0JdV9Tv/C+C7oqgQb3mozMKkNgA:AZb5CERZpeVze0rDv/Mkqg439MXNgA
- TLSH T13863025D50538D1262174E7A73E22D7B84EB1F824D6EAA4EC9B8CD5B353A940903E3CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MegelinaPro.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
MegelinaPro.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target MegelinaPro.exe.exe
- Size 173KB
- SHA256 e3f5ef86c4069a5b43b59bd69fb648dfe470e6a31424a950b1e9d064989d4d73
- MD5 9cc6003963d47b4ea960ed71d158173b
- SHA1 2c781bd3e74c60de1ec714631c005745a7ea3849
- SHA512 78bc1422334999ab068e8fe6c407fb8278e6e011cf89bb556728bd5f8e034f4c6fbc1dc9dc57c9be6fbd51d9c516027462956c3286444143d5925544262f7848
- SSDEEP 3072:cqeXA/4yIbHkNPN+6H6xCYOigUE2656JOWQ0D:cvdHkNFdaxmMEaJGo
- TLSH T181044B07A2A850BEE1B7D679C9A28951FB737C154B71A7CF03904DB72E627D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL