General
- Target 1ddf47ca3d4a367ff76f537b43d43ad19a1e2421341bfe1032388319e06e13dc
- Size 1.1MB
- Sample260820-knwesawtev
- SHA256 1ddf47ca3d4a367ff76f537b43d43ad19a1e2421341bfe1032388319e06e13dc
- MD5 1680cdd951a00915d7f19561e45277e6
- SHA1 16391e257cc53d590e192c94128766d158f8acc0
- SHA512 54085612dcf9d7dc70afb9323a6576020c72b2954eb311f5859c1f49793816d897ff1e4c23966a0a335bc15a540b3eb3ff61c1501a5927103623c578eb8598f8
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnM:AylFHUv6ReIt0jSrOL
- TLSH T12B357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1ddf47ca3d4a367ff76f537b43d43ad19a1e2421341bfe1032388319e06e13dc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ddf47ca3d4a367ff76f537b43d43ad19a1e2421341bfe1032388319e06e13dc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 1ddf47ca3d4a367ff76f537b43d43ad19a1e2421341bfe1032388319e06e13dc
- Size 1.1MB
- SHA256 1ddf47ca3d4a367ff76f537b43d43ad19a1e2421341bfe1032388319e06e13dc
- MD5 1680cdd951a00915d7f19561e45277e6
- SHA1 16391e257cc53d590e192c94128766d158f8acc0
- SHA512 54085612dcf9d7dc70afb9323a6576020c72b2954eb311f5859c1f49793816d897ff1e4c23966a0a335bc15a540b3eb3ff61c1501a5927103623c578eb8598f8
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnM:AylFHUv6ReIt0jSrOL
- TLSH T12B357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE