General
- Target IChanger.exe
- Size 680.0MB
- Sample260828-1rtclatsgy
- SHA256 b344827b514c09cd7a3254b138f19126f06913bfeb5c0158b3184fd89e19e35d
- MD5 0b7f82a6c255c733b2e36711811668ab
- SHA1 a7c286ce97c91755379240ac4c7feafe425a0bbf
- SHA512 d413c78555686a038c2af472bcf3325a184cc68da1f6e0e3e81cc083ad1fab4a36c15fafbab3437532b126b15658f6c831bf5891b1aa7a76af9ca55deeda2433
- SSDEEP 24576:mbQfQjWKM072B6mqJX6gT9bm/30oLFPPhBIWtwanovU1430u4BodKPom5LL3f12H:oQfiZ7qB66gtyhZXhVoHdiF5fIqbJkY
- TLSH T144790209E7A448F8E4B7AB78AD52CD32E2767C6D377096CF53A462522F132908E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IChanger.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
IChanger.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target IChanger.exe
- Size 680.0MB
- SHA256 b344827b514c09cd7a3254b138f19126f06913bfeb5c0158b3184fd89e19e35d
- MD5 0b7f82a6c255c733b2e36711811668ab
- SHA1 a7c286ce97c91755379240ac4c7feafe425a0bbf
- SHA512 d413c78555686a038c2af472bcf3325a184cc68da1f6e0e3e81cc083ad1fab4a36c15fafbab3437532b126b15658f6c831bf5891b1aa7a76af9ca55deeda2433
- SSDEEP 24576:mbQfQjWKM072B6mqJX6gT9bm/30oLFPPhBIWtwanovU1430u4BodKPom5LL3f12H:oQfiZ7qB66gtyhZXhVoHdiF5fIqbJkY
- TLSH T144790209E7A448F8E4B7AB78AD52CD32E2767C6D377096CF53A462522F132908E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Download via BitsAdmin
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.