General
- Target 0e489873bbc1e4ac72eca7b8f0ebfd097d51d7d8c1ac0b180f814e03e39eff7b
- Size 1.6MB
- Sample260831-kagdpsfn5s
- SHA256 0e489873bbc1e4ac72eca7b8f0ebfd097d51d7d8c1ac0b180f814e03e39eff7b
- MD5 55b1b8ea13de9549d9ab0680e971d5a7
- SHA1 93df0816bd8f8730f039da3fe7a455e845073387
- SHA512 4a7668f0f8d6be536169286f904a6e54dbb02beb943805ae6c8876ebaebd53581b4c501a075a39b65525dd8a6798f47db57df5bf6e7fe10fff5ec86621e3b40e
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQX:AylFHUv6ReIt0jSrOA88s
- TLSH T1D3757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e489873bbc1e4ac72eca7b8f0ebfd097d51d7d8c1ac0b180f814e03e39eff7b.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e489873bbc1e4ac72eca7b8f0ebfd097d51d7d8c1ac0b180f814e03e39eff7b.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0e489873bbc1e4ac72eca7b8f0ebfd097d51d7d8c1ac0b180f814e03e39eff7b
- Size 1.6MB
- SHA256 0e489873bbc1e4ac72eca7b8f0ebfd097d51d7d8c1ac0b180f814e03e39eff7b
- MD5 55b1b8ea13de9549d9ab0680e971d5a7
- SHA1 93df0816bd8f8730f039da3fe7a455e845073387
- SHA512 4a7668f0f8d6be536169286f904a6e54dbb02beb943805ae6c8876ebaebd53581b4c501a075a39b65525dd8a6798f47db57df5bf6e7fe10fff5ec86621e3b40e
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQX:AylFHUv6ReIt0jSrOA88s
- TLSH T1D3757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE