General
- Target ab634b4d115cf005fd97dcdb0d0ea2c38217b69560fffde526eb0a8fddc277a9
- Size 311KB
- Sample260825-qcy97aam4v
- SHA256 ab634b4d115cf005fd97dcdb0d0ea2c38217b69560fffde526eb0a8fddc277a9
- MD5 508c296d4624fb476379c7687d3b25f7
- SHA1 8d13da6b720ee5dd5945f77b52027ebb53ca3621
- SHA512 4046d2da4a270db7baa3bbc02e98e25ab3e9c6721ca90f84af27e366640e6619bd2e6b2e83e67ea8c536fa108d72e78b755d83619fff8c4a770fbd5e574f7f0b
- SSDEEP 6144:/UgQIuADRpc9x+mKMLZbitRPhtXWGNU6ITLxiEwgdyO:mwkNKiZ+RrGGNUbTNwcf
- TLSH T19B64177BDD28ECF1C67E9CB89B51C7009B7275304B6292CBE2B48299CE072E05E79D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ab634b4d115cf005fd97dcdb0d0ea2c38217b69560fffde526eb0a8fddc277a9.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ab634b4d115cf005fd97dcdb0d0ea2c38217b69560fffde526eb0a8fddc277a9
- Size 311KB
- SHA256 ab634b4d115cf005fd97dcdb0d0ea2c38217b69560fffde526eb0a8fddc277a9
- MD5 508c296d4624fb476379c7687d3b25f7
- SHA1 8d13da6b720ee5dd5945f77b52027ebb53ca3621
- SHA512 4046d2da4a270db7baa3bbc02e98e25ab3e9c6721ca90f84af27e366640e6619bd2e6b2e83e67ea8c536fa108d72e78b755d83619fff8c4a770fbd5e574f7f0b
- SSDEEP 6144:/UgQIuADRpc9x+mKMLZbitRPhtXWGNU6ITLxiEwgdyO:mwkNKiZ+RrGGNUbTNwcf
- TLSH T19B64177BDD28ECF1C67E9CB89B51C7009B7275304B6292CBE2B48299CE072E05E79D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE