General
- Target 128c43f295032738a152e49e7fffab37a291c4335d573b8ef075847c90476397
- Size 1018KB
- Sample260831-cqf4watdla
- SHA256 128c43f295032738a152e49e7fffab37a291c4335d573b8ef075847c90476397
- MD5 af30ddc2f54d5124be32a15a6639bae6
- SHA1 f875bb59218112303acb647f2fdc187fb6d5aa7e
- SHA512 f76dddc7bed3ca113cd730e12fee129843362d36b4f366313537114f2d4151d856d5e7a0e8d6e4fffde4d07126cab95a0b844a1bc18587b244e8d6f01dda80d2
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMv:AylFHUv6ReIt0jSrOY
- TLSH T131257B02B64DC2B1D28C157136BF77366D349B5A1A35CA93B7E0CDAC2D32751AE2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
128c43f295032738a152e49e7fffab37a291c4335d573b8ef075847c90476397.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
128c43f295032738a152e49e7fffab37a291c4335d573b8ef075847c90476397.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 128c43f295032738a152e49e7fffab37a291c4335d573b8ef075847c90476397
- Size 1018KB
- SHA256 128c43f295032738a152e49e7fffab37a291c4335d573b8ef075847c90476397
- MD5 af30ddc2f54d5124be32a15a6639bae6
- SHA1 f875bb59218112303acb647f2fdc187fb6d5aa7e
- SHA512 f76dddc7bed3ca113cd730e12fee129843362d36b4f366313537114f2d4151d856d5e7a0e8d6e4fffde4d07126cab95a0b844a1bc18587b244e8d6f01dda80d2
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMv:AylFHUv6ReIt0jSrOY
- TLSH T131257B02B64DC2B1D28C157136BF77366D349B5A1A35CA93B7E0CDAC2D32751AE2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE