General
- Target External.txt
- Size 55B
- Sample260827-cys4eaw1fs
- SHA256 086ab4733285d44b42b440559c7d1e0f4d0da645b47c057de5718b5e1d2b595c
- MD5 77843deb0d63c4ef4e49cd0bf223fb52
- SHA1 003411d9006e8cdda1822ec4b1ef5821dbbacb2a
- SHA512 9e2af37c23d0d01fb2f41a82734414daed77ddc451a86a6c3da3451e74f9afb1c516a873a4b0905a609cf7ee9a50a77bda6cc0c6c418260d5dfd594daf408da7
- TLSH T10B9002F7514A1F284B1193CC218F7048802304DC59CDC119F651C52D9705526163025D
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
External.txt
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
External.txt
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target External.txt
- Size 55B
- SHA256 086ab4733285d44b42b440559c7d1e0f4d0da645b47c057de5718b5e1d2b595c
- MD5 77843deb0d63c4ef4e49cd0bf223fb52
- SHA1 003411d9006e8cdda1822ec4b1ef5821dbbacb2a
- SHA512 9e2af37c23d0d01fb2f41a82734414daed77ddc451a86a6c3da3451e74f9afb1c516a873a4b0905a609cf7ee9a50a77bda6cc0c6c418260d5dfd594daf408da7
- TLSH T10B9002F7514A1F284B1193CC218F7048802304DC59CDC119F651C52D9705526163025D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.