General
- Target 1ffd478a1475cbe596fc36476af6df23616f2ae315c7c00d97fa035e1c065e7f
- Size 1.2MB
- Sample260812-sjmwvaap6s
- SHA256 1ffd478a1475cbe596fc36476af6df23616f2ae315c7c00d97fa035e1c065e7f
- MD5 3e7fb2a7a34e4e4c4a41217b0fb54534
- SHA1 580e09af3ca72ece291595539ad269bb97fed0e5
- SHA512 43a7e1fdff6b1fc43d674210f1088c2fb581d317103bce84ea16f89ea4adbd4c517a50cdf753be05e81ae5eb4244cf853c36894ff4c3d73c24c37b881958f9b5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhg:AylFHUv6ReIt0jSrOM
- TLSH T167457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1ffd478a1475cbe596fc36476af6df23616f2ae315c7c00d97fa035e1c065e7f.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ffd478a1475cbe596fc36476af6df23616f2ae315c7c00d97fa035e1c065e7f.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 1ffd478a1475cbe596fc36476af6df23616f2ae315c7c00d97fa035e1c065e7f
- Size 1.2MB
- SHA256 1ffd478a1475cbe596fc36476af6df23616f2ae315c7c00d97fa035e1c065e7f
- MD5 3e7fb2a7a34e4e4c4a41217b0fb54534
- SHA1 580e09af3ca72ece291595539ad269bb97fed0e5
- SHA512 43a7e1fdff6b1fc43d674210f1088c2fb581d317103bce84ea16f89ea4adbd4c517a50cdf753be05e81ae5eb4244cf853c36894ff4c3d73c24c37b881958f9b5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhg:AylFHUv6ReIt0jSrOM
- TLSH T167457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE