General
- Target d85e9d7c01a820b850c4d489455a2cc6674cbbe257668deb03769d1eb39fb917
- Size 311KB
- Sample260827-hb5ftagd73
- SHA256 d85e9d7c01a820b850c4d489455a2cc6674cbbe257668deb03769d1eb39fb917
- MD5 0eade28d4afe979cec25b406a34ff92d
- SHA1 9fa5a413fb13e00c207d8d5deda1f66562e6b4af
- SHA512 59705c13daf7541eea4fb5eef1e7764cb9d86312acd48ccb0e763b2032d6769832b92818cad31e4da05f411a8869d9f7ccdcc4128d446f244f1bf1508126e7ac
- SSDEEP 6144:5UgcIuADRpc9x+mKMLZbitRPhtXWGNU6ITLxiEwgdyO:gwkNKiZ+RrGGNUbTNwcf
- TLSH T19E64177BDD28ECF1C67E9CB89B51C7009B7275304B6292CBE2B48299CE072E05E79D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d85e9d7c01a820b850c4d489455a2cc6674cbbe257668deb03769d1eb39fb917.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d85e9d7c01a820b850c4d489455a2cc6674cbbe257668deb03769d1eb39fb917
- Size 311KB
- SHA256 d85e9d7c01a820b850c4d489455a2cc6674cbbe257668deb03769d1eb39fb917
- MD5 0eade28d4afe979cec25b406a34ff92d
- SHA1 9fa5a413fb13e00c207d8d5deda1f66562e6b4af
- SHA512 59705c13daf7541eea4fb5eef1e7764cb9d86312acd48ccb0e763b2032d6769832b92818cad31e4da05f411a8869d9f7ccdcc4128d446f244f1bf1508126e7ac
- SSDEEP 6144:5UgcIuADRpc9x+mKMLZbitRPhtXWGNU6ITLxiEwgdyO:gwkNKiZ+RrGGNUbTNwcf
- TLSH T19E64177BDD28ECF1C67E9CB89B51C7009B7275304B6292CBE2B48299CE072E05E79D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE