General
- Target cef35cf829075901956e4251b303eda6614ef34e4472d9cabc375f31d1e63a54
- Size 1.9MB
- Sample260821-wbrrlsvbra
- SHA256 cef35cf829075901956e4251b303eda6614ef34e4472d9cabc375f31d1e63a54
- MD5 973a5fd80c8d52387c051f1fd741cef8
- SHA1 3db7e0ad51595edc0a3680db0015f375122cd414
- SHA512 2c09ae37192c1cc99a93992a25611ce969c350691f1255aa25e3770560b3faddebe9d66e75d7d44d619ea8a426e725a3f990f5e0b234cad7815b4d3da8f03633
- SSDEEP 49152:6RhnS4EP4CRRVl8pjO1schvbLE4cdnbXoAktLD/p9qkVdWu5:6RUWK14dnStp9nPWu5
- TLSH T1AE95BF5AB7A841B6D167C17DC953865AF3B2B4160B20D7DF0364836E2F23BE11E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cef35cf829075901956e4251b303eda6614ef34e4472d9cabc375f31d1e63a54.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
cef35cf829075901956e4251b303eda6614ef34e4472d9cabc375f31d1e63a54.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target cef35cf829075901956e4251b303eda6614ef34e4472d9cabc375f31d1e63a54
- Size 1.9MB
- SHA256 cef35cf829075901956e4251b303eda6614ef34e4472d9cabc375f31d1e63a54
- MD5 973a5fd80c8d52387c051f1fd741cef8
- SHA1 3db7e0ad51595edc0a3680db0015f375122cd414
- SHA512 2c09ae37192c1cc99a93992a25611ce969c350691f1255aa25e3770560b3faddebe9d66e75d7d44d619ea8a426e725a3f990f5e0b234cad7815b4d3da8f03633
- SSDEEP 49152:6RhnS4EP4CRRVl8pjO1schvbLE4cdnbXoAktLD/p9qkVdWu5:6RUWK14dnStp9nPWu5
- TLSH T1AE95BF5AB7A841B6D167C17DC953865AF3B2B4160B20D7DF0364836E2F23BE11E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.