General
- Target SecuriteInfo.com.W64.Agent.ECKA.tr.25116.31718.exe
- Size 3.3MB
- Sample260823-aefb4acq8w
- SHA256 5693516606e4593095480afa2d0d2f8f7740a73f2789bf0d549fece3dada9d1c
- MD5 5801382ae3ce2e897245e9698f641ca8
- SHA1 554251df76b0f387e8c288ba01433be7d3ccc896
- SHA512 2e56b93ad23b4c3f4b4cb57f6ba5a57259974836c4814ddc896957b255eaf5ad961b6d5ea99d436120a10c9aaa763a57f0152c5bbbb00549c14dc989d1742955
- SSDEEP 98304:cvOityjtyH3BfOv62zgotKjYofINcMN0vfgpreyP:zit+tSfG62zgbEVNc5faSC
- TLSH T1FBF5231DD7A844FDE0B7A574CA924C12E73ABC4A4771E78B07D4B8521F732909A3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W64.Agent.ECKA.tr.25116.31718.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W64.Agent.ECKA.tr.25116.31718.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.W64.Agent.ECKA.tr.25116.31718.exe
- Size 3.3MB
- SHA256 5693516606e4593095480afa2d0d2f8f7740a73f2789bf0d549fece3dada9d1c
- MD5 5801382ae3ce2e897245e9698f641ca8
- SHA1 554251df76b0f387e8c288ba01433be7d3ccc896
- SHA512 2e56b93ad23b4c3f4b4cb57f6ba5a57259974836c4814ddc896957b255eaf5ad961b6d5ea99d436120a10c9aaa763a57f0152c5bbbb00549c14dc989d1742955
- SSDEEP 98304:cvOityjtyH3BfOv62zgotKjYofINcMN0vfgpreyP:zit+tSfG62zgbEVNc5faSC
- TLSH T1FBF5231DD7A844FDE0B7A574CA924C12E73ABC4A4771E78B07D4B8521F732909A3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL