General
- Target 52f2cfd7cb8d98f5fa795b1a0fb61ecf.exe
- Size 4.1MB
- Sample260820-g3ffbstyaw
- SHA256 360935831e4bf1ea910f4b3f9160a0e67c938c3d58b6b23f4a214fc38f709668
- MD5 52f2cfd7cb8d98f5fa795b1a0fb61ecf
- SHA1 1b3d8e85df71987c29ca6d0e512b4e491b80b9d4
- SHA512 79d00243732b83f1254b07b1a8e54c16169e4e50f51ed6d7a1dc220252d0a05aad05055e059719074e9c2358b912f597c61d803bd5265a3b80e8fdb4ca42d13c
- SSDEEP 98304:HRJVlXpZL9lmSanS0e85WWb9dyTyrunrXKk7O:9lX7L/NanWM8wu7
- TLSH T1D81633C3334521DFF5E943F38A4618F891AAEB019437ECE8977D58721466D8EBC1BA06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
52f2cfd7cb8d98f5fa795b1a0fb61ecf.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
52f2cfd7cb8d98f5fa795b1a0fb61ecf.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 52f2cfd7cb8d98f5fa795b1a0fb61ecf.exe
- Size 4.1MB
- SHA256 360935831e4bf1ea910f4b3f9160a0e67c938c3d58b6b23f4a214fc38f709668
- MD5 52f2cfd7cb8d98f5fa795b1a0fb61ecf
- SHA1 1b3d8e85df71987c29ca6d0e512b4e491b80b9d4
- SHA512 79d00243732b83f1254b07b1a8e54c16169e4e50f51ed6d7a1dc220252d0a05aad05055e059719074e9c2358b912f597c61d803bd5265a3b80e8fdb4ca42d13c
- SSDEEP 98304:HRJVlXpZL9lmSanS0e85WWb9dyTyrunrXKk7O:9lX7L/NanWM8wu7
- TLSH T1D81633C3334521DFF5E943F38A4618F891AAEB019437ECE8977D58721466D8EBC1BA06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.