General
- Target h5pk43w5t9fvorgk.exe
- Size 847KB
- Sample260819-nkejmsvtht
- SHA256 135394c23beda135582605e70019fa7d4db06b8148100aaded0027ec0d6fd21f
- MD5 dffdecbbe79be7699c4c96ea812e688b
- SHA1 64d1c2c4969ec0c3bc52dfeacf287ed9c3072602
- SHA512 cee23c04c44c44507025ca2b04e4ceba256f6c069af90b9e4ab4aa96efa5b29139f68abf6b49da219c0d6f5d39b7af3ba2b6d8b60e008bf1616f2dbc4e5df456
- SSDEEP 12288:22yklMwO7n1tTcCF6q8DHOr2X1x5bEEFbMrF1nrpU2EF:E7n7TcCF691Ymbgr7a
- TLSH T1FA05D7243B949E01E5441A3E92BE1618D73270F32312AB47370AF7614D85AFEED6C7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
h5pk43w5t9fvorgk.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
h5pk43w5t9fvorgk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target h5pk43w5t9fvorgk.exe
- Size 847KB
- SHA256 135394c23beda135582605e70019fa7d4db06b8148100aaded0027ec0d6fd21f
- MD5 dffdecbbe79be7699c4c96ea812e688b
- SHA1 64d1c2c4969ec0c3bc52dfeacf287ed9c3072602
- SHA512 cee23c04c44c44507025ca2b04e4ceba256f6c069af90b9e4ab4aa96efa5b29139f68abf6b49da219c0d6f5d39b7af3ba2b6d8b60e008bf1616f2dbc4e5df456
- SSDEEP 12288:22yklMwO7n1tTcCF6q8DHOr2X1x5bEEFbMrF1nrpU2EF:E7n7TcCF691Ymbgr7a
- TLSH T1FA05D7243B949E01E5441A3E92BE1618D73270F32312AB47370AF7614D85AFEED6C7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.