General
- Target 61ef482b2bc423f9c876ac99fb2b2048897efa075e960310341f487cf206f58c
- Size 2.7MB
- Sample260818-pg7axssape
- SHA256 61ef482b2bc423f9c876ac99fb2b2048897efa075e960310341f487cf206f58c
- MD5 e9510647a0192389482a5d60294e9d10
- SHA1 f0c221766863c8ebe6d5652e1859a56fdc62087e
- SHA512 778b998df8c1efe746781df258fa8e73f538c6051d05986e2dc1ad6fc81db0d5dd10d01cb879bf318c9701e788e3f00a9bae9494bd8ab1b30e047e5a9381d3f7
- SSDEEP 49152:g1pwNmU10fC7jxEmqJ06BdBPnJRFkac5Fe80LcITWNFK/LNFFLi38iDCARu0d8xX:kwkQ09ckJRF9c5Fe8nNFKLNFFLi38iDc
- TLSH T143D5E0139ABA49C3F7287071649B1ABCA90BF41EF7A457F6D217B5CCDB2C39102E4825
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
61ef482b2bc423f9c876ac99fb2b2048897efa075e960310341f487cf206f58c.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 61ef482b2bc423f9c876ac99fb2b2048897efa075e960310341f487cf206f58c
- Size 2.7MB
- SHA256 61ef482b2bc423f9c876ac99fb2b2048897efa075e960310341f487cf206f58c
- MD5 e9510647a0192389482a5d60294e9d10
- SHA1 f0c221766863c8ebe6d5652e1859a56fdc62087e
- SHA512 778b998df8c1efe746781df258fa8e73f538c6051d05986e2dc1ad6fc81db0d5dd10d01cb879bf318c9701e788e3f00a9bae9494bd8ab1b30e047e5a9381d3f7
- SSDEEP 49152:g1pwNmU10fC7jxEmqJ06BdBPnJRFkac5Fe80LcITWNFK/LNFFLi38iDCARu0d8xX:kwkQ09ckJRF9c5Fe8nNFKLNFFLi38iDc
- TLSH T143D5E0139ABA49C3F7287071649B1ABCA90BF41EF7A457F6D217B5CCDB2C39102E4825
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.