General
- Target WiFi_BASIS_Ed_Wrapper.exe
- Size 7.6MB
- Sample260819-wpezzazckb
- SHA256 42b932067e0b08cdf8961251ead8f88b6e1c3cfffdcb77e1d43c453cffd2ea85
- MD5 c5d439f8fe180a3dda309ceb866cbe6b
- SHA1 52dc9d111adfdf2320b9b4c505e1ffeae114022d
- SHA512 20532c5232b6017b34a80ea055ecff028c4b7b00fb865720a099268ac9ddd13c61abf21ef62b4fcdf27875d0d673a4f3a79a2931b5a91ed5df0bd5e429215cf5
- SSDEEP 196608:xLmmiCBF47y5ok9q6h7sJ464vhd/1LMQmqb:xLmmiCBF47Rqq6h7C4/1MQma
- TLSH T12786330CA446E89BCB5620B1E56E4BF0F7EF1D58C578AFCF26947DC279B40C8B914286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WiFi_BASIS_Ed_Wrapper.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
WiFi_BASIS_Ed_Wrapper.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
$TEMP/SecureW2_JoinNow.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
$TEMP/SecureW2_JoinNow.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target WiFi_BASIS_Ed_Wrapper.exe
- Size 7.6MB
- SHA256 42b932067e0b08cdf8961251ead8f88b6e1c3cfffdcb77e1d43c453cffd2ea85
- MD5 c5d439f8fe180a3dda309ceb866cbe6b
- SHA1 52dc9d111adfdf2320b9b4c505e1ffeae114022d
- SHA512 20532c5232b6017b34a80ea055ecff028c4b7b00fb865720a099268ac9ddd13c61abf21ef62b4fcdf27875d0d673a4f3a79a2931b5a91ed5df0bd5e429215cf5
- SSDEEP 196608:xLmmiCBF47y5ok9q6h7sJ464vhd/1LMQmqb:xLmmiCBF47Rqq6h7C4/1MQma
- TLSH T12786330CA446E89BCB5620B1E56E4BF0F7EF1D58C578AFCF26947DC279B40C8B914286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $TEMP/SecureW2_JoinNow.exe
- Size 6.9MB
- SHA256 2bdcd46b5ccf9d7b6bc26c8e2ca3862e5acf23b1836f897862f35b5b7f8b74bb
- MD5 c988560a629ef900d4c0bdf8337cad58
- SHA1 03f06b46ec444d81be2bcc5e729d0cd6e3281981
- SHA512 8f622face339add024fa3782547dd45b295c6682b9196989622269258c10b69b96b9bb120b78bf1e8fabe3e1864d40251279a97ac0778d3dbae1090c7c7266c6
- SSDEEP 98304:K80vzLtxfj+SDTG91iKJAsnNYtHqxS55ldRnkAzGFTR4BPezxV4jJ+JhnDp:K8saSfbsnxufkAzGxKUgYJBp
- TLSH T1E876D00573E88158F0F7D779C97E55A1DA32BC829B31CAAF0190B9592E33BD09D35B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.