General
- Target 0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
- Size 22KB
- Sample260831-pc72nagc29
- SHA256 0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
- MD5 145d917294b9a6ab2d0853df8e37bd55
- SHA1 eaf7b28ba624bec47fdb1ae63205bf6456f4e4db
- SHA512 5412ee5803f5ed819f02993e15b91243ba40e33e3c29851c07ca55ecbaa065702c5c0a921f9a8f30ff4dba023c6c4e82c4df920385624e3665d263fe93ca5f28
- SSDEEP 384:TS6R8TvoUY3F+qOZyTqIWPWPpdsOazIfGMDQs8J9MWlYGh3gNikNZZ:TSCCvBrtyqIWCpdshCwaGZCTNH
- TLSH T183A2CF5FEBA94C33C91D4D780E6E4E82BE35EF32A2D507199D54613B0D1D3B1C0B2969
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
- Size 22KB
- SHA256 0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
- MD5 145d917294b9a6ab2d0853df8e37bd55
- SHA1 eaf7b28ba624bec47fdb1ae63205bf6456f4e4db
- SHA512 5412ee5803f5ed819f02993e15b91243ba40e33e3c29851c07ca55ecbaa065702c5c0a921f9a8f30ff4dba023c6c4e82c4df920385624e3665d263fe93ca5f28
- SSDEEP 384:TS6R8TvoUY3F+qOZyTqIWPWPpdsOazIfGMDQs8J9MWlYGh3gNikNZZ:TSCCvBrtyqIWCpdshCwaGZCTNH
- TLSH T183A2CF5FEBA94C33C91D4D780E6E4E82BE35EF32A2D507199D54613B0D1D3B1C0B2969
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory