General
- Target 7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
- Size 3.4MB
- Sample260827-tq4cvabl3s
- SHA256 7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
- MD5 2a4138098dac366e87e8af294f2e58c1
- SHA1 592634c12b242e68c3b8c6f9b191e672ad3d7569
- SHA512 7122769e494863e844589be53d4738bdb129c7c630ee5112c0f85e911bba7e3c8999e06294722a2a4fde859a4e96c0ab4efc76aee0040b1fa8d9d2eb94da7741
- SSDEEP 49152:nE5JoJpbgFcqBB97PRHn25NPk5tpFy1Yyj+A02Md:28kOS97P52HEPtyi
- TLSH T150F5AC025CD722D08739F9AE17630DDE990F5B7D74F6AE06423392B9D23A6723E63016
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
- Size 3.4MB
- SHA256 7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
- MD5 2a4138098dac366e87e8af294f2e58c1
- SHA1 592634c12b242e68c3b8c6f9b191e672ad3d7569
- SHA512 7122769e494863e844589be53d4738bdb129c7c630ee5112c0f85e911bba7e3c8999e06294722a2a4fde859a4e96c0ab4efc76aee0040b1fa8d9d2eb94da7741
- SSDEEP 49152:nE5JoJpbgFcqBB97PRHn25NPk5tpFy1Yyj+A02Md:28kOS97P52HEPtyi
- TLSH T150F5AC025CD722D08739F9AE17630DDE990F5B7D74F6AE06423392B9D23A6723E63016
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE