General
- Target AjarSys.exe
- Size 5.8MB
- Sample260822-s6sqlshp21
- SHA256 418f6ff813bbbbe5344b9f8fea28948259bcfd28d424f1354289f5071c85d6ca
- MD5 0816a1e816f9737a1fd3eaa7493aa075
- SHA1 682405e63e3cfa28f955ea4eee2890b93fa6414d
- SHA512 640000c30a3c1e8d05bc5383daa405303596b8694e11a17a04a77e3cf0688a887f35a7f8d38ffea89e8a3ba6e36e63c4b39285b83bfffa55e9fab5cc595484a8
- SSDEEP 98304:wYOgp0AsZKigPWKQ/HVRBH9vYewem9lTTdxlN7/c3DgPY9rT6Bl1tF:wYL0rtC3Q/pdePbH7/0DIYNT6LbF
- TLSH T13A56338BFFD4C4B0C53649364E36E74644BC3A680B15CB1FA7998E3DA6353625310AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AjarSys.exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target AjarSys.exe
- Size 5.8MB
- SHA256 418f6ff813bbbbe5344b9f8fea28948259bcfd28d424f1354289f5071c85d6ca
- MD5 0816a1e816f9737a1fd3eaa7493aa075
- SHA1 682405e63e3cfa28f955ea4eee2890b93fa6414d
- SHA512 640000c30a3c1e8d05bc5383daa405303596b8694e11a17a04a77e3cf0688a887f35a7f8d38ffea89e8a3ba6e36e63c4b39285b83bfffa55e9fab5cc595484a8
- SSDEEP 98304:wYOgp0AsZKigPWKQ/HVRBH9vYewem9lTTdxlN7/c3DgPY9rT6Bl1tF:wYL0rtC3Q/pdePbH7/0DIYNT6LbF
- TLSH T13A56338BFFD4C4B0C53649364E36E74644BC3A680B15CB1FA7998E3DA6353625310AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.