General
- Target dc6c8b08b3ec520caf6dc33431cd4aa8bf73fed45b852a97c3a9e95de0177249
- Size 5.8MB
- Sample260811-khhlqsdd72
- SHA256 dc6c8b08b3ec520caf6dc33431cd4aa8bf73fed45b852a97c3a9e95de0177249
- MD5 608a2cb3cdf575915a2070a2001e31e5
- SHA1 dfcaa352218fb03dffb622a4e468153f0afc901a
- SHA512 3ae0c7fb81efb18578d44f31fcf322aee2ea8491c9a1ed13565491cf6cfe07c9b86faecdb0e16c2053bf120e42a6e1130ad70c6babd46c798cedce9380a4b96c
- SSDEEP 98304:Wryc1NfD3ALbYCYMlyDZDaZJDeL6o6FSdVQu+CWOKVfaHD0b2V1zeTJc05PlG:r8fMLb1YvVi66IL+CWOsfaIbEA5tG
- TLSH T16B5633AA1A3C939849644091F7A2DD03288D5BCF9510F35DE789E126EEF268F13BD35C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CLodop6.644_Setup_Win64EN.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
CLodop6.644_Setup_Win64EN.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target CLodop6.644_Setup_Win64EN.exe
- Size 5.9MB
- SHA256 05beddabc320ac13abe3843059d131e8a83c17e956de8f652385a93f7177179c
- MD5 e278f3c3574e74e1e370e5de9d5c2dac
- SHA1 83ab1a0cb3f11cb36d16dc4d678c7ffa1c6d1f04
- SHA512 22a6f99c15c00b79544e10cf797c9e9f7be5f90c2ba049cffec0a7d948886955198a350636ac6b0511c7fedd43e149459df654f05ede0d33c4df7fb2dcdf79ca
- SSDEEP 98304:Bv3mEdNfzve5TsoACzSRn923t5OnO+W1YhPK2m6WGmLL+FD8tYxT98jp8CzP/C:QOfa5TrAt1wyWaBm6WGoL+mtu8znC
- TLSH T1785633575A3883B8C85481B0BF62CD02295EAF8B5520F25CF78DA41A9FB328B566D35C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.