General
- Target 1a8fb5fe01ef77441fb36aa6b9c13fa551087e3cca1c4eec01a3ca26ee1b2ea8.bin
- Size 24KB
- Sample260822-qkhbmsy1as
- SHA256 1a8fb5fe01ef77441fb36aa6b9c13fa551087e3cca1c4eec01a3ca26ee1b2ea8
- MD5 5b239e0959351e8d4d4d40a858d12813
- SHA1 4e4a6aa5c6750bcc2fecf732e66e11c24b9140d7
- SHA512 0adacb7b85f82a4a7891eb614e5be925d26d8f8bc6f89f4ed7d816241b559e1084bbe71aa92a8c784fda23dbdbc259cbc757cfe44b9ccbdce33971a33f204315
- SSDEEP 384:qjD6bqVIy0xylC5LyGEbNqDmo8hIjS8tsjLR9ya5fJvwtpd2fEUgptMbzyMQB:qjDcqbYmGmymoBOzjNv5FupdYEHgb5
- TLSH T163B2E03CA799EEE2C38D167D87129B287F0495918BCCCBF20421046FD7DD9A28CB450B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1a8fb5fe01ef77441fb36aa6b9c13fa551087e3cca1c4eec01a3ca26ee1b2ea8.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a8fb5fe01ef77441fb36aa6b9c13fa551087e3cca1c4eec01a3ca26ee1b2ea8.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 1a8fb5fe01ef77441fb36aa6b9c13fa551087e3cca1c4eec01a3ca26ee1b2ea8.bin
- Size 24KB
- SHA256 1a8fb5fe01ef77441fb36aa6b9c13fa551087e3cca1c4eec01a3ca26ee1b2ea8
- MD5 5b239e0959351e8d4d4d40a858d12813
- SHA1 4e4a6aa5c6750bcc2fecf732e66e11c24b9140d7
- SHA512 0adacb7b85f82a4a7891eb614e5be925d26d8f8bc6f89f4ed7d816241b559e1084bbe71aa92a8c784fda23dbdbc259cbc757cfe44b9ccbdce33971a33f204315
- SSDEEP 384:qjD6bqVIy0xylC5LyGEbNqDmo8hIjS8tsjLR9ya5fJvwtpd2fEUgptMbzyMQB:qjDcqbYmGmymoBOzjNv5FupdYEHgb5
- TLSH T163B2E03CA799EEE2C38D167D87129B287F0495918BCCCBF20421046FD7DD9A28CB450B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory