General
- Target dbe0c1e9e561583f3f6d4325f71b9c90e2dfb795926aa5ac7d2dcf8ff72e5de3
- Size 793KB
- Sample260824-n2p2psfq91
- SHA256 dbe0c1e9e561583f3f6d4325f71b9c90e2dfb795926aa5ac7d2dcf8ff72e5de3
- MD5 c2b5f2ce440ce2c0c4fd8ab68e2bd872
- SHA1 23fe50dd16ffa7906f5890182ec914dd86b366b2
- SHA512 2831e8521204db3b3d140b1991aaba871da8bcc9f71644bdc62efb1799fcb1db1538b21173a3c7818a1f82c2ece873f3c266626a46ab17ec2c2cf837d45de2ce
- SSDEEP 24576:8wEpodyn7AV2TjBTykq2/ASY0rWbGSwCp0v4:Epq6AV2jskq2oSXa7RpB
- TLSH T12105333C0A98BEB3D6E0E9B08CC13F4B5EA55B919334ADE69638611CB454CAD5B13C1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ជ្រើសរើសបុគ្គលិកជាគណនេយ្យករជាបន្ទ�.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ជ្រើសរើសបុគ្គលិកជាគណនេយ្យករជាបន្ទ�.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ជ្រើសរើសបុគ្គលិកជាគណនេយ្យករជាបន្ទាន់។ តម្រូវការការងារ៖doc.exe
- Size 2.1MB
- SHA256 156196b23e9bd89f37e50d16436695169ee8adad572bde53c45e2a6e69e1de71
- MD5 a0944972989e33b3388ccafd1f66620a
- SHA1 595405b761154125e5ee49cb35a5a6e24a9f372c
- SHA512 80de8e14e3dc2574028a41601af82c4e1be6a41c1c3a6eea2b418c497b25fe9f9ce4d9d7d43e04b32ebe053c54abd3dae710c81fdbcfaed9856a8369fbd723d0
- SSDEEP 24576:wCvnXZkdlwP4aHHjnNIkG889X4asVrvcEvsjpSVaEmbSQgJe9:wCvpkdlPIHjc9X4asVrvj0jApmL
- TLSH T17FA55C03B16580DAE06AD8F9874A8131E5F47C990BB5B2CF1280B7651FB7BE41B3E764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE