General
- Target 9241f74800f1023b5ef9a1b15c1ff5e975a81478e14194dc71aad0c9a90a151c
- Size 2.8MB
- Sample260820-hm3rcsfr4t
- SHA256 9241f74800f1023b5ef9a1b15c1ff5e975a81478e14194dc71aad0c9a90a151c
- MD5 8be05c63f5fd3e983bbf78cd0249cb0d
- SHA1 2492ff76f82fc3daa868435edbaa9058af2d9839
- SHA512 3cd20d1f58e66bf151fc9c386bef0c1ed86e50e481d60ad827a6c3773d00cd117213c3f361ef313b58d24dbcfb3f4f5c190a4969aa0e01c336eb238b14b7879d
- SSDEEP 49152:puI2h2IvBpfIp8wTF3eeVkfoSL3rdf/rVltjksl:p5O2QBpfIp8wh3eGp2rJztJl
- TLSH T10DD5F13FB28B753EE06E5A367AB6A210983F6A6165124C56D7F4C84CCF250701E3F786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
9241f74800f1023b5ef9a1b15c1ff5e975a81478e14194dc71aad0c9a90a151c.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
9241f74800f1023b5ef9a1b15c1ff5e975a81478e14194dc71aad0c9a90a151c.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 9241f74800f1023b5ef9a1b15c1ff5e975a81478e14194dc71aad0c9a90a151c
- Size 2.8MB
- SHA256 9241f74800f1023b5ef9a1b15c1ff5e975a81478e14194dc71aad0c9a90a151c
- MD5 8be05c63f5fd3e983bbf78cd0249cb0d
- SHA1 2492ff76f82fc3daa868435edbaa9058af2d9839
- SHA512 3cd20d1f58e66bf151fc9c386bef0c1ed86e50e481d60ad827a6c3773d00cd117213c3f361ef313b58d24dbcfb3f4f5c190a4969aa0e01c336eb238b14b7879d
- SSDEEP 49152:puI2h2IvBpfIp8wTF3eeVkfoSL3rdf/rVltjksl:p5O2QBpfIp8wh3eGp2rJztJl
- TLSH T10DD5F13FB28B753EE06E5A367AB6A210983F6A6165124C56D7F4C84CCF250701E3F786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Modifies RDP port number used by Windows
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled