General
- Target 21d5471e4474d0805c09f9312d32f6235516c157d7de4ce05e47a4ae6e03090d
- Size 1.2MB
- Sample260819-hsf5jsfk91
- SHA256 21d5471e4474d0805c09f9312d32f6235516c157d7de4ce05e47a4ae6e03090d
- MD5 2cb1ab28fd8f82981d8d33f0b32c52e0
- SHA1 5947552c846dd1edd9c89c3de2f7f2e15351579d
- SHA512 0eae8bb5c5b3d25b0e665f1f754399146306c0abe543dc58f24c4eb214442c07a4b0447f07c984c582954a4c994e82491403c88d0231322c68cfc8206da1ab0b
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhy:AylFHUv6ReIt0jSrO+
- TLSH T110457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21d5471e4474d0805c09f9312d32f6235516c157d7de4ce05e47a4ae6e03090d.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
21d5471e4474d0805c09f9312d32f6235516c157d7de4ce05e47a4ae6e03090d.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 21d5471e4474d0805c09f9312d32f6235516c157d7de4ce05e47a4ae6e03090d
- Size 1.2MB
- SHA256 21d5471e4474d0805c09f9312d32f6235516c157d7de4ce05e47a4ae6e03090d
- MD5 2cb1ab28fd8f82981d8d33f0b32c52e0
- SHA1 5947552c846dd1edd9c89c3de2f7f2e15351579d
- SHA512 0eae8bb5c5b3d25b0e665f1f754399146306c0abe543dc58f24c4eb214442c07a4b0447f07c984c582954a4c994e82491403c88d0231322c68cfc8206da1ab0b
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhy:AylFHUv6ReIt0jSrO+
- TLSH T110457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE