General
- Target EMU-26.731.2-preview-win-x64.exe
- Size 356.9MB
- Sample260813-fb1rhssand
- SHA256 0e16d3b4784df2cefdd53b9f64407c3283a0fa9a1a63af046a7c23ad92cdb19c
- MD5 1c7fb4266427916346eeb41693157609
- SHA1 4dfe4b867c68537543fa8f172956f5d1a60efb1f
- SHA512 d57390eacc201e785a433221192abbcef6302962846cda0b9f457b7f3f229ba8939a707bd95a81c215fe73bc395d7084848fc7015c7e7f92266e6b0ef804da6d
- SSDEEP 6291456:vLAfoeQtNTFIRn6QISfDIjKpgsNHZrCKDWhdNhXSNx9SmPE0gi+k7:TAo9S0SsjvUHZtDWhThiNx9SmP5+k7
- TLSH T1BD0933E2FE41D0FFE49E81B5E4ADFE38BB7546964B6A84C356D909481CD23E05A1320F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
EMU-26.731.2-preview-win-x64.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
EMU-26.731.2-preview-win-x64.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target EMU-26.731.2-preview-win-x64.exe
- Size 356.9MB
- SHA256 0e16d3b4784df2cefdd53b9f64407c3283a0fa9a1a63af046a7c23ad92cdb19c
- MD5 1c7fb4266427916346eeb41693157609
- SHA1 4dfe4b867c68537543fa8f172956f5d1a60efb1f
- SHA512 d57390eacc201e785a433221192abbcef6302962846cda0b9f457b7f3f229ba8939a707bd95a81c215fe73bc395d7084848fc7015c7e7f92266e6b0ef804da6d
- SSDEEP 6291456:vLAfoeQtNTFIRn6QISfDIjKpgsNHZrCKDWhdNhXSNx9SmPE0gi+k7:TAo9S0SsjvUHZtDWhThiNx9SmP5+k7
- TLSH T1BD0933E2FE41D0FFE49E81B5E4ADFE38BB7546964B6A84C356D909481CD23E05A1320F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.