General
- Target 6d9b87c67ef04c87a0561109fbff57e56a61be109b096801c6a3d06d3ccf39bb
- Size 10.0MB
- Sample260825-amx7wadn4s
- SHA256 6d9b87c67ef04c87a0561109fbff57e56a61be109b096801c6a3d06d3ccf39bb
- MD5 05b7ccb94117d9bba106b057f9e50374
- SHA1 1392da4ac66adf52f23a068a8a924aabe2ddd282
- SHA512 6106e194310ba3a07f08f8d4b579cbea5d2bf75fff98ea724fbbdd6f37874f5ded41e13dcb9298dbed32910a9ae258a16ea7193ef7192d9e2608086d7f62592c
- SSDEEP 196608:Jz+YkDd8MSFUzXV+znIGATfYoDlD2JHG7qDcVnHPvws9o:AYkd8MSFUReYTgslDKHG7qQVvvwP
- TLSH T172B63356EBA405FCD122E0718CA68B43F6BB7C1D2722E78F17D56A521F136A1ED2C701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6d9b87c67ef04c87a0561109fbff57e56a61be109b096801c6a3d06d3ccf39bb.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d9b87c67ef04c87a0561109fbff57e56a61be109b096801c6a3d06d3ccf39bb.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 6d9b87c67ef04c87a0561109fbff57e56a61be109b096801c6a3d06d3ccf39bb
- Size 10.0MB
- SHA256 6d9b87c67ef04c87a0561109fbff57e56a61be109b096801c6a3d06d3ccf39bb
- MD5 05b7ccb94117d9bba106b057f9e50374
- SHA1 1392da4ac66adf52f23a068a8a924aabe2ddd282
- SHA512 6106e194310ba3a07f08f8d4b579cbea5d2bf75fff98ea724fbbdd6f37874f5ded41e13dcb9298dbed32910a9ae258a16ea7193ef7192d9e2608086d7f62592c
- SSDEEP 196608:Jz+YkDd8MSFUzXV+znIGATfYoDlD2JHG7qDcVnHPvws9o:AYkd8MSFUReYTgslDKHG7qQVvvwP
- TLSH T172B63356EBA405FCD122E0718CA68B43F6BB7C1D2722E78F17D56A521F136A1ED2C701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE