General
- Target 2ee4d96f66c1ce8aae0d3b8ca7cbdeeff5362c9150c8f1bbb7fc3301dcff3243
- Size 1.1MB
- Sample260825-ja2tzatzgt
- SHA256 2ee4d96f66c1ce8aae0d3b8ca7cbdeeff5362c9150c8f1bbb7fc3301dcff3243
- MD5 3b9f041e7a6536f89f3d02a122653f0a
- SHA1 e6d43d095cd2071c1d87b2ad80d86ff7c85c6bdc
- SHA512 de1e9aa43e120e6ce4f3b92b7da534a17edc716dd6af764eea63cb7d8da6d1662f49302f054778ea491ca4fc63487a45f8fd0bc4eefef56285f73f8d20d161d5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMn3:AylFHUv6ReIt0jSrOc
- TLSH T16D357E02B94DC2B1D18C14702D6F73366D349A5A3B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2ee4d96f66c1ce8aae0d3b8ca7cbdeeff5362c9150c8f1bbb7fc3301dcff3243.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2ee4d96f66c1ce8aae0d3b8ca7cbdeeff5362c9150c8f1bbb7fc3301dcff3243.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2ee4d96f66c1ce8aae0d3b8ca7cbdeeff5362c9150c8f1bbb7fc3301dcff3243
- Size 1.1MB
- SHA256 2ee4d96f66c1ce8aae0d3b8ca7cbdeeff5362c9150c8f1bbb7fc3301dcff3243
- MD5 3b9f041e7a6536f89f3d02a122653f0a
- SHA1 e6d43d095cd2071c1d87b2ad80d86ff7c85c6bdc
- SHA512 de1e9aa43e120e6ce4f3b92b7da534a17edc716dd6af764eea63cb7d8da6d1662f49302f054778ea491ca4fc63487a45f8fd0bc4eefef56285f73f8d20d161d5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMn3:AylFHUv6ReIt0jSrOc
- TLSH T16D357E02B94DC2B1D18C14702D6F73366D349A5A3B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE