General
- Target b2c3b18c63878a6eab1a552ee89413904cf1d2e85451d1f881e3da6874b8fc43
- Size 1.9MB
- Sample260821-wfdesaywfv
- SHA256 b2c3b18c63878a6eab1a552ee89413904cf1d2e85451d1f881e3da6874b8fc43
- MD5 cd030305a232b279c2bd5d3289903a72
- SHA1 6176c493a13fe5e92434ff94eb9273c7685ac28b
- SHA512 709fefc16be70e9fe03084d7466e5e0f4c5bd7b6b8368049eb47545553868c719b8a34b175d5f6ef3b0f5393266276cefc07ef25a9ade00570bb5f72c759260f
- SSDEEP 49152:6RhnS4EP4CRRVl8pjO1schvbLE4cdnbXoAktLD/p9qkVdWu4:6RUWK14dnStp9nPWu4
- TLSH T15195BF5AB7A841B6D167C17DC953865AF3B2B4160B20D7DF0364836E2F23BE11E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b2c3b18c63878a6eab1a552ee89413904cf1d2e85451d1f881e3da6874b8fc43.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b2c3b18c63878a6eab1a552ee89413904cf1d2e85451d1f881e3da6874b8fc43.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target b2c3b18c63878a6eab1a552ee89413904cf1d2e85451d1f881e3da6874b8fc43
- Size 1.9MB
- SHA256 b2c3b18c63878a6eab1a552ee89413904cf1d2e85451d1f881e3da6874b8fc43
- MD5 cd030305a232b279c2bd5d3289903a72
- SHA1 6176c493a13fe5e92434ff94eb9273c7685ac28b
- SHA512 709fefc16be70e9fe03084d7466e5e0f4c5bd7b6b8368049eb47545553868c719b8a34b175d5f6ef3b0f5393266276cefc07ef25a9ade00570bb5f72c759260f
- SSDEEP 49152:6RhnS4EP4CRRVl8pjO1schvbLE4cdnbXoAktLD/p9qkVdWu4:6RUWK14dnStp9nPWu4
- TLSH T15195BF5AB7A841B6D167C17DC953865AF3B2B4160B20D7DF0364836E2F23BE11E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.