General
- Target b35e03c19d43a31aa928305fc66135c04806fb9f1d756cf922eabc07acb3c789.bin
- Size 24KB
- Sample260813-ne94csxtaz
- SHA256 b35e03c19d43a31aa928305fc66135c04806fb9f1d756cf922eabc07acb3c789
- MD5 45d1bca34d6e0d7ac9976b84c594d4eb
- SHA1 2ee7fd58ec6ed608a4d0817f10accec59c9afa8f
- SHA512 b4de465478f808f60d7b4d75b9d9d4502c365decb7922a951175463a8af8d3711a9d696b1f4e62f26c6d607705aeb4a88b2fd63bb51a369fb68e5059e0958063
- SSDEEP 384:qjD6bqVIy0xylC5LyGEbNqDmo8hIjS8tsjLR9ya5fJvwtpd2fEUgptMbzyMQB:qjDcqbYmGmymoBOzjNv5FupdYEHgb5
- TLSH T1F9B2E03CA799AEE2C38D167D87129B287F04D5918BCCCBF20421046FDBDD9A28CB450B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b35e03c19d43a31aa928305fc66135c04806fb9f1d756cf922eabc07acb3c789.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b35e03c19d43a31aa928305fc66135c04806fb9f1d756cf922eabc07acb3c789.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b35e03c19d43a31aa928305fc66135c04806fb9f1d756cf922eabc07acb3c789.bin
- Size 24KB
- SHA256 b35e03c19d43a31aa928305fc66135c04806fb9f1d756cf922eabc07acb3c789
- MD5 45d1bca34d6e0d7ac9976b84c594d4eb
- SHA1 2ee7fd58ec6ed608a4d0817f10accec59c9afa8f
- SHA512 b4de465478f808f60d7b4d75b9d9d4502c365decb7922a951175463a8af8d3711a9d696b1f4e62f26c6d607705aeb4a88b2fd63bb51a369fb68e5059e0958063
- SSDEEP 384:qjD6bqVIy0xylC5LyGEbNqDmo8hIjS8tsjLR9ya5fJvwtpd2fEUgptMbzyMQB:qjDcqbYmGmymoBOzjNv5FupdYEHgb5
- TLSH T1F9B2E03CA799AEE2C38D167D87129B287F04D5918BCCCBF20421046FDBDD9A28CB450B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory