General
- Target 09c81090b6232b7bbb393b34407bc2fb9d491585a48c1f9db2acb4e190f6eea7
- Size 15.9MB
- Sample260815-j3lnfseg64
- SHA256 09c81090b6232b7bbb393b34407bc2fb9d491585a48c1f9db2acb4e190f6eea7
- MD5 4b5e37d2458a6abfb2c1f6c0cf138fc8
- SHA1 e8eef379e1cbc65396fe44646528bdddc046505b
- SHA512 6889639bbccaedc86daa1d3273ce475c08400bbd32593377b564dd32310f5c001184b377dc0d6cb801e9bf5dd16e9bc05e4bb53a1391e9585ffa57148753be2d
- SSDEEP 196608:vxhcHNoVwVvza3PtlsapI9jhnfUf5qs8o99HhYUJZtlWs1O9DbVETtK4tzjf:v0HowVleqsNTyU1lLkQzjf
- TLSH T116F6C010B225412AF8F701F69BEEC55EE098B7600F7840D753946EEAFE295D23C3658B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
09c81090b6232b7bbb393b34407bc2fb9d491585a48c1f9db2acb4e190f6eea7.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
09c81090b6232b7bbb393b34407bc2fb9d491585a48c1f9db2acb4e190f6eea7.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 09c81090b6232b7bbb393b34407bc2fb9d491585a48c1f9db2acb4e190f6eea7
- Size 15.9MB
- SHA256 09c81090b6232b7bbb393b34407bc2fb9d491585a48c1f9db2acb4e190f6eea7
- MD5 4b5e37d2458a6abfb2c1f6c0cf138fc8
- SHA1 e8eef379e1cbc65396fe44646528bdddc046505b
- SHA512 6889639bbccaedc86daa1d3273ce475c08400bbd32593377b564dd32310f5c001184b377dc0d6cb801e9bf5dd16e9bc05e4bb53a1391e9585ffa57148753be2d
- SSDEEP 196608:vxhcHNoVwVvza3PtlsapI9jhnfUf5qs8o99HhYUJZtlWs1O9DbVETtK4tzjf:v0HowVleqsNTyU1lLkQzjf
- TLSH T116F6C010B225412AF8F701F69BEEC55EE098B7600F7840D753946EEAFE295D23C3658B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL