General
- Target 5b14bb8cf49c045f40c34a41768c50ab96bcc69444aa21ee696400439ccacf85
- Size 1.1MB
- Sample260816-pha9waxdmg
- SHA256 5b14bb8cf49c045f40c34a41768c50ab96bcc69444aa21ee696400439ccacf85
- MD5 b1695474739f37c9a4f0fca65ad2b606
- SHA1 5dff3216fe28f174a4dc9f5d58dced1921cf15f1
- SHA512 32932f741ce27a62ebf48bb29cc54cc60e0cbf8c00c379587f9dc464a23d387a26ca7fcdc3a549f8dda3d345993c17b122de383e00731d7c73651a23bd7026d6
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMn4:AylFHUv6ReIt0jSrO/
- TLSH T143357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5b14bb8cf49c045f40c34a41768c50ab96bcc69444aa21ee696400439ccacf85.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b14bb8cf49c045f40c34a41768c50ab96bcc69444aa21ee696400439ccacf85.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 5b14bb8cf49c045f40c34a41768c50ab96bcc69444aa21ee696400439ccacf85
- Size 1.1MB
- SHA256 5b14bb8cf49c045f40c34a41768c50ab96bcc69444aa21ee696400439ccacf85
- MD5 b1695474739f37c9a4f0fca65ad2b606
- SHA1 5dff3216fe28f174a4dc9f5d58dced1921cf15f1
- SHA512 32932f741ce27a62ebf48bb29cc54cc60e0cbf8c00c379587f9dc464a23d387a26ca7fcdc3a549f8dda3d345993c17b122de383e00731d7c73651a23bd7026d6
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMn4:AylFHUv6ReIt0jSrO/
- TLSH T143357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE