General
- Target loader.exe
- Size 19KB
- Sample260831-aaq8ssscka
- SHA256 8f20d8ded00ca6037ebc233bc1c856ff4502346bbc619349119b88fd6b874007
- MD5 2554814e2ae2e4785fdd10d87b050f83
- SHA1 8e190e325ad23639a28cb8d3bb08609726c5ae97
- SHA512 56c991a34f7ca4ab3c049ad4b69f8185e7bc38188c3872ac2d70b4324a188a5a01e3731b1082ab5e9776577a0983a13c73e2266e190b9c43565a3687a8289ed2
- SSDEEP 192:8p7Fo+r7EwhhOeaivI6Wo28xMD6Oc89sWpRdCXVIizIJvk4m/SEYAQYLUMfwVSyi:8p7y+/9tyoXM2On+BXX9X/XNQYD3j2H
- TLSH T19F924B07B74B48EAD036937D86E74B25E2B2F8164B226BCF5391915D0E6B3C46C73E48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 19KB
- SHA256 8f20d8ded00ca6037ebc233bc1c856ff4502346bbc619349119b88fd6b874007
- MD5 2554814e2ae2e4785fdd10d87b050f83
- SHA1 8e190e325ad23639a28cb8d3bb08609726c5ae97
- SHA512 56c991a34f7ca4ab3c049ad4b69f8185e7bc38188c3872ac2d70b4324a188a5a01e3731b1082ab5e9776577a0983a13c73e2266e190b9c43565a3687a8289ed2
- SSDEEP 192:8p7Fo+r7EwhhOeaivI6Wo28xMD6Oc89sWpRdCXVIizIJvk4m/SEYAQYLUMfwVSyi:8p7y+/9tyoXM2On+BXX9X/XNQYD3j2H
- TLSH T19F924B07B74B48EAD036937D86E74B25E2B2F8164B226BCF5391915D0E6B3C46C73E48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger