General
- Target ce0488e82a858ef758aca73844c07936dda307d62534dedb07465fea85bbbe7d
- Size 2.0MB
- Sample260814-gp7yesdp2s
- SHA256 ce0488e82a858ef758aca73844c07936dda307d62534dedb07465fea85bbbe7d
- MD5 290c1679c0d74ef210ee508146c09fee
- SHA1 4e95f6f8fb6deb25fce3121df691031572ab015c
- SHA512 0a2764a3fa3a0cf8193afce5251fc8aff56baf7f97e1b1200324f69430614e92e468b36df4be40006177fa84e040d4be993abcb011e03716d8547d96a10c8a55
- SSDEEP 24576:ux9pkkbI4LtzGEx7UlwztY76+CDSXpFetwM4UzmGhhZVeU8pEFl7pPtQbUZPkJJB:uB5xh7Ue2CGewMZiG59/3HvZBFFjALh
- TLSH T150A533AD44F40BEF61ABA9430B6C5FF0640F649111A12DA6C367FA84E22F764D7CDA1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
ចុចដើម្បីលុបការឆ្លងមេរោគ។.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
ចុចដើម្បីលុបការឆ្លងមេរោគ។.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target ចុចដើម្បីលុបការឆ្លងមេរោគ។.bat
- Size 2.5MB
- SHA256 36eb1f737f4dc3a41c5b5c5cc22f93ad9d65e400f0f2f1a8f354530023b2140a
- MD5 b3cef830f59b2ae42aea51de8d79d5ec
- SHA1 dff7f2747c29e3459d3d95ac179b5d700f3b83ab
- SHA512 27ec29a85b20ecbb3c488f3e9c5e1d9c90df37782dc331520c120c652b0f067cd81f3c393a722d0522d1f988af27bdb2015b46debf07d70397fa25a2a76ad155
- SSDEEP 24576:GXVrSLScusMmOvjjhzvLNHSx7ATw9LY76uCfApNFejuMiUd+Sh97V6K8pmFH7BPQ:puI2hE7AYkC82uMfoSL3rdf/rVltjksi
- TLSH T176C5E03FB28B653EE06E5A367A76E610583B7A6165124C16D6F4C88CCF250B01E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Modifies RDP port number used by Windows
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled