General
- Target b37b959671f92a2e2261d9ac6dcc1d2fa0a1dca77ab944949ca405978d992f22
- Size 657KB
- Sample260826-wdcepstcqe
- SHA256 b37b959671f92a2e2261d9ac6dcc1d2fa0a1dca77ab944949ca405978d992f22
- MD5 5000dacf8b22cb2fbeb39b68ea31dedd
- SHA1 47e9193ab79f7ed6c7dc644a561ef155efd83700
- SHA512 7f6a0c2c8b8357a397524e3d83312638bfc3f2b318a4568cd4162359e735bfd83c7703336139ca96fe276f942bf47ea9363855f5be627922560f22a3448ff04c
- SSDEEP 12288:K0A9S1TieKPrVsvLkWiTT6L2+MrQBB8Ed7+2siD4nCyNjMbaSJiP:TA8ilPrVALknT+L2LlEdq2QCyNFEy
- TLSH T17FE423ABB4C98CBFEB420173493F63E16135767532650B9317F0CB7C39A2984E91629B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b37b959671f92a2e2261d9ac6dcc1d2fa0a1dca77ab944949ca405978d992f22.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b37b959671f92a2e2261d9ac6dcc1d2fa0a1dca77ab944949ca405978d992f22
- Size 657KB
- SHA256 b37b959671f92a2e2261d9ac6dcc1d2fa0a1dca77ab944949ca405978d992f22
- MD5 5000dacf8b22cb2fbeb39b68ea31dedd
- SHA1 47e9193ab79f7ed6c7dc644a561ef155efd83700
- SHA512 7f6a0c2c8b8357a397524e3d83312638bfc3f2b318a4568cd4162359e735bfd83c7703336139ca96fe276f942bf47ea9363855f5be627922560f22a3448ff04c
- SSDEEP 12288:K0A9S1TieKPrVsvLkWiTT6L2+MrQBB8Ed7+2siD4nCyNjMbaSJiP:TA8ilPrVALknT+L2LlEdq2QCyNFEy
- TLSH T17FE423ABB4C98CBFEB420173493F63E16135767532650B9317F0CB7C39A2984E91629B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.