General
- Target 2f64abb191fcd05852c467dba9183024b94480e19de9ab36ec24b58630812789
- Size 1.2MB
- Sample260812-qs2egshm31
- SHA256 2f64abb191fcd05852c467dba9183024b94480e19de9ab36ec24b58630812789
- MD5 095565e0e56cb53e064363e507c89029
- SHA1 14a132837948232ff3a6637d8798bcd9ecd456d0
- SHA512 e8094445fac5afe04ae2d37694e6a2eb634a61a14398d7c0067cf13d7b9417d37c7b629563efb0d79ab94dba9d10408978517061ea1047fab6090570fb6d6ca5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAh4:AylFHUv6ReIt0jSrOE
- TLSH T17F457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B3D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2f64abb191fcd05852c467dba9183024b94480e19de9ab36ec24b58630812789.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2f64abb191fcd05852c467dba9183024b94480e19de9ab36ec24b58630812789.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2f64abb191fcd05852c467dba9183024b94480e19de9ab36ec24b58630812789
- Size 1.2MB
- SHA256 2f64abb191fcd05852c467dba9183024b94480e19de9ab36ec24b58630812789
- MD5 095565e0e56cb53e064363e507c89029
- SHA1 14a132837948232ff3a6637d8798bcd9ecd456d0
- SHA512 e8094445fac5afe04ae2d37694e6a2eb634a61a14398d7c0067cf13d7b9417d37c7b629563efb0d79ab94dba9d10408978517061ea1047fab6090570fb6d6ca5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAh4:AylFHUv6ReIt0jSrOE
- TLSH T17F457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B3D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE