General
- Target 9ae040b7fdf2b7c77ad7bb2106acf007dd869f6bd0ea9118cf94dd45a90aa1e4
- Size 2.7MB
- Sample260831-r1c8astfna
- SHA256 9ae040b7fdf2b7c77ad7bb2106acf007dd869f6bd0ea9118cf94dd45a90aa1e4
- MD5 ecc09364c0e4e5ed474c49c0e552ce71
- SHA1 60a6acba9ae0efddf6fa00a09c5f74579f5bfb20
- SHA512 b6e498c5a8bbb70c8bc4dafd9ac6f0c3c3686eee291681a9dab896b94626f4c9b986ca5f08017bc3f8ed69a83381245331d49f3df44a6772e18b628e3e68e047
- SSDEEP 49152:xbER+Mn1K4B9qXzc9MECDGiZ3mgPqFzZH0c:xbEB1KqKz05CPZ3mgyFz1
- TLSH T1AED5DFE88AF54895FB31987C4B11E9C58EEC2D59BD18ECA7010AC88D6DB1BC4601FB77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9ae040b7fdf2b7c77ad7bb2106acf007dd869f6bd0ea9118cf94dd45a90aa1e4.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 9ae040b7fdf2b7c77ad7bb2106acf007dd869f6bd0ea9118cf94dd45a90aa1e4
- Size 2.7MB
- SHA256 9ae040b7fdf2b7c77ad7bb2106acf007dd869f6bd0ea9118cf94dd45a90aa1e4
- MD5 ecc09364c0e4e5ed474c49c0e552ce71
- SHA1 60a6acba9ae0efddf6fa00a09c5f74579f5bfb20
- SHA512 b6e498c5a8bbb70c8bc4dafd9ac6f0c3c3686eee291681a9dab896b94626f4c9b986ca5f08017bc3f8ed69a83381245331d49f3df44a6772e18b628e3e68e047
- SSDEEP 49152:xbER+Mn1K4B9qXzc9MECDGiZ3mgPqFzZH0c:xbEB1KqKz05CPZ3mgyFz1
- TLSH T1AED5DFE88AF54895FB31987C4B11E9C58EEC2D59BD18ECA7010AC88D6DB1BC4601FB77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.