General
- Target yp224b9mxkutcisw.exe
- Size 704KB
- Sample260815-jfbvqs1hrb
- SHA256 af7ac7794e11739e75bd1f47172d86aad7f6995600cccb723947ddbcb261cfe3
- MD5 2f781f807d370a17c9e2806832339b06
- SHA1 f22bf2d0b025472c60ecf82b3dae53c237f2c6b5
- SHA512 b8269ced5556d9a0fc86dbb5b279a5d3bf63d2b4960ee240fd14cd2b22bf3f3b2415b3c6a7440efbf304b98718499291e40e7a1506ba79f498f61e4c2ed7a666
- SSDEEP 12288:HLLujrvj7CZX7Pac8ZBiPFFK5q2mKBh1d:yQLSc8ZI+Wwd
- TLSH T1B7E4A5257B959E41D540193E92BA2608D732A0F32313AB47370AF7A14D44BFEED2C7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yp224b9mxkutcisw.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
yp224b9mxkutcisw.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target yp224b9mxkutcisw.exe
- Size 704KB
- SHA256 af7ac7794e11739e75bd1f47172d86aad7f6995600cccb723947ddbcb261cfe3
- MD5 2f781f807d370a17c9e2806832339b06
- SHA1 f22bf2d0b025472c60ecf82b3dae53c237f2c6b5
- SHA512 b8269ced5556d9a0fc86dbb5b279a5d3bf63d2b4960ee240fd14cd2b22bf3f3b2415b3c6a7440efbf304b98718499291e40e7a1506ba79f498f61e4c2ed7a666
- SSDEEP 12288:HLLujrvj7CZX7Pac8ZBiPFFK5q2mKBh1d:yQLSc8ZI+Wwd
- TLSH T1B7E4A5257B959E41D540193E92BA2608D732A0F32313AB47370AF7A14D44BFEED2C7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.