General
- Target RealPlayer.exe
- Size 1.1MB
- Sample260819-pg46kawsfz
- SHA256 6e73e9dd0933c3b56dfb6039375f53048746b0289812160f892f5ec90fc167e3
- MD5 a4ec6fc50e7e7064e48e21a3300c5811
- SHA1 42b6f6de11c6c70488bbe5ca5dada8f3ddb42a17
- SHA512 667e18a659f75e10707c359653737bacc89dca575955896d17b298b28a8ed85666ad86ac856c87668c55f133f3fbe057a3805d8beed3ccd435da3eed4fcc5a92
- SSDEEP 24576:v/KcOsIGLAEyV8KfaM7NOJOATnhm/josOCVjHSLItz0EsQZDe:v/zERl7NOEx/jfNHSMz0EBZy
- TLSH T1BE358C1176D4C032F0B21631DE7E5765A839BD71473548CBBBC8297D2A78AC29A31F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
RealPlayer.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
RealPlayer.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target RealPlayer.exe
- Size 1.1MB
- SHA256 6e73e9dd0933c3b56dfb6039375f53048746b0289812160f892f5ec90fc167e3
- MD5 a4ec6fc50e7e7064e48e21a3300c5811
- SHA1 42b6f6de11c6c70488bbe5ca5dada8f3ddb42a17
- SHA512 667e18a659f75e10707c359653737bacc89dca575955896d17b298b28a8ed85666ad86ac856c87668c55f133f3fbe057a3805d8beed3ccd435da3eed4fcc5a92
- SSDEEP 24576:v/KcOsIGLAEyV8KfaM7NOJOATnhm/josOCVjHSLItz0EsQZDe:v/zERl7NOEx/jfNHSMz0EBZy
- TLSH T1BE358C1176D4C032F0B21631DE7E5765A839BD71473548CBBBC8297D2A78AC29A31F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks for any installed AV software in registry
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.