General
- Target полиция.exe
- Size 418KB
- Sample260810-ylpfcagl5w
- SHA256 0bf4a5582d0cf1a117e7be96e62a7293a58f0f6548ac558cdce41e981f4f7cfa
- MD5 0176aa2a2823bfdd677c59c4a044face
- SHA1 f7464fce6ca9db13050290818b219cc031ed9ce6
- SHA512 e3e4a4c37ee1febaebfd489bdb45b2da229fdc103d808c5b7310c6683ecd491258cd806e0ba8ba918e8633c65023f35c87122e72422deb0028e0f03dc11b2d89
- SSDEEP 12288:wzxzTDWikLSb4NS78Pzo8O7Xl7jfVpUzuCiy:mDWHSb4NRbobZVvo
- TLSH T12794D101F9C18872C6721E319536AF6069787D301F249F9F93D4996EAD302C1EB36B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
полиция.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
полиция.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target полиция.exe
- Size 418KB
- SHA256 0bf4a5582d0cf1a117e7be96e62a7293a58f0f6548ac558cdce41e981f4f7cfa
- MD5 0176aa2a2823bfdd677c59c4a044face
- SHA1 f7464fce6ca9db13050290818b219cc031ed9ce6
- SHA512 e3e4a4c37ee1febaebfd489bdb45b2da229fdc103d808c5b7310c6683ecd491258cd806e0ba8ba918e8633c65023f35c87122e72422deb0028e0f03dc11b2d89
- SSDEEP 12288:wzxzTDWikLSb4NS78Pzo8O7Xl7jfVpUzuCiy:mDWHSb4NRbobZVvo
- TLSH T12794D101F9C18872C6721E319536AF6069787D301F249F9F93D4996EAD302C1EB36B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Executes a VBScript file via the Windows Script Host.