General
- Target f172a2fd1d79a8f1b4557faa576dfe8bd28a9885896cca1951b238d77d2473f7
- Size 1.1MB
- Sample260819-knkchs1bmd
- SHA256 f172a2fd1d79a8f1b4557faa576dfe8bd28a9885896cca1951b238d77d2473f7
- MD5 03a3c418ff30c1de828273d65f0f3379
- SHA1 7aa422545a37db9c4d670a433435fa45083f6c05
- SHA512 cdce26750a30ab06fcf44cd3e33e02be2c3b29866ad3e04c18d13954066eb1ab12edb5858b223f552b7516d53280b938687dcab725de7eae0ca628b9d64872d2
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnN:AylFHUv6ReIt0jSrOq
- TLSH T15E357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f172a2fd1d79a8f1b4557faa576dfe8bd28a9885896cca1951b238d77d2473f7.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
f172a2fd1d79a8f1b4557faa576dfe8bd28a9885896cca1951b238d77d2473f7.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target f172a2fd1d79a8f1b4557faa576dfe8bd28a9885896cca1951b238d77d2473f7
- Size 1.1MB
- SHA256 f172a2fd1d79a8f1b4557faa576dfe8bd28a9885896cca1951b238d77d2473f7
- MD5 03a3c418ff30c1de828273d65f0f3379
- SHA1 7aa422545a37db9c4d670a433435fa45083f6c05
- SHA512 cdce26750a30ab06fcf44cd3e33e02be2c3b29866ad3e04c18d13954066eb1ab12edb5858b223f552b7516d53280b938687dcab725de7eae0ca628b9d64872d2
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnN:AylFHUv6ReIt0jSrOq
- TLSH T15E357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE