General
- Target 82706_promo_chaio.zip
- Size 143KB
- Sample260831-1cynrsstft
- SHA256 0b0c934fcaf1a774f3cdb844d9d2f95d89b24b1f2c3970ac5dce3277a9f97186
- MD5 6a8e76bb37e40260b97d5bf25eabe0a0
- SHA1 033526056295df42393ae06d76a1bea39e8e273f
- SHA512 cc05d55c5a4c476dc167b9c14bb1e65c47e07a0c5d86ab73c1439dab93da947df281067959e7a7cc161e7a1b56914db59b306d3d40e326c6d135a1400bba99a9
- SSDEEP 3072:dYUhJ92JZvhtyn6D/+1jxZahmv3/j0fv3gWKH44q/iQMR8VyohJA6l2:zD92JhgmojPaS7ivXh45Q28Db2
- TLSH T105E31241AD7570D590A04E363009CAAC34B278EB778D3FA8A4D97BFFB85CB955D2602C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EM2026.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
EM2026.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target EM2026.exe
- Size 253KB
- SHA256 7e850d16cf44d92226901c73773d4b04e414ffa70e22d47c6a6b486af2f2e8c6
- MD5 03bb1e34d4b42568affd7a4ebddeb3ee
- SHA1 cca47c929dee557b590c53c2a2dd6703d38a92a2
- SHA512 ffd337fd2ca6877d8a0f2ec9ca250b46b35b35950b1671ad7fc7187697bb0b20caebc42a091a2fbcbd49d5239a09239efb37bd3d5c89780420ce7252f3097d18
- SSDEEP 3072:j0bLtAYGw/UIldFE1wdTjz9W6klaWoWoPMh6/Eajr2EtAXG07Of:6JLGw8IldFECnJWRFyE8/EajPyG2Of
- TLSH T17644165C7DC0B72AC4AD99B64F261C96F2E831B3C0444A8A6D79DE5367C36E04EB131E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.