General
- Target 2af9d43f07ed149b528269da596ebd3d650fc9b27df186b355b549483d7dbdc3
- Size 1.1MB
- Sample260818-pdtwessalf
- SHA256 2af9d43f07ed149b528269da596ebd3d650fc9b27df186b355b549483d7dbdc3
- MD5 5328d6e5635fda0898fc18705735c225
- SHA1 393c1ea33170320f9937f06ce9adcbd95d9dd932
- SHA512 c8af3a85f4dc63ac3cb68c18d37d66c1558b061ce8d0a1e524df20d1a23bb5c5d4c48f78d1805b28253ba63ba49268ae997cfba15e30f7e00ea98822238ad3bf
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnr:AylFHUv6ReIt0jSrOI
- TLSH T116357E02B94DC2B1D18C14702D6F73366D349A5A3B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2af9d43f07ed149b528269da596ebd3d650fc9b27df186b355b549483d7dbdc3.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2af9d43f07ed149b528269da596ebd3d650fc9b27df186b355b549483d7dbdc3.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2af9d43f07ed149b528269da596ebd3d650fc9b27df186b355b549483d7dbdc3
- Size 1.1MB
- SHA256 2af9d43f07ed149b528269da596ebd3d650fc9b27df186b355b549483d7dbdc3
- MD5 5328d6e5635fda0898fc18705735c225
- SHA1 393c1ea33170320f9937f06ce9adcbd95d9dd932
- SHA512 c8af3a85f4dc63ac3cb68c18d37d66c1558b061ce8d0a1e524df20d1a23bb5c5d4c48f78d1805b28253ba63ba49268ae997cfba15e30f7e00ea98822238ad3bf
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnr:AylFHUv6ReIt0jSrOI
- TLSH T116357E02B94DC2B1D18C14702D6F73366D349A5A3B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE