General
- Target xztx127的综合分发软件.exe
- Size 555KB
- Sample260905-pjnllathlb
- SHA256 cbc29a055ec003129a72de00543b44f23177a1841b9f151572c7db951be4d881
- MD5 66ca508b91df81090fc37462962a41f3
- SHA1 3520584c19e6b58c23bae5bf3f71243120464d00
- SHA512 c1ba6ea600ffcd13d5afb5a7ce9484055c87be3ef1e9d60bd290487a266929e1a9229c93762a2aed6f64b7dac69d5fc6460f49b6b6e63df9a52b1f53ec3b726a
- SSDEEP 12288:mcv0NT+IXVy0F9Xoo9v6H0B2Iff7DfORsk1YUP7DMJN81RMMWc:mcvkT+Mg0jX59iH0B1fTDfgs2YUUJN8F
- TLSH T134C41214B6D140FBD5E1497110AA621BBB79AB302770A8EBC7DC3C92C953AC4963C3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xztx127的综合分发软件.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
xztx127的综合分发软件.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target xztx127的综合分发软件.exe
- Size 555KB
- SHA256 cbc29a055ec003129a72de00543b44f23177a1841b9f151572c7db951be4d881
- MD5 66ca508b91df81090fc37462962a41f3
- SHA1 3520584c19e6b58c23bae5bf3f71243120464d00
- SHA512 c1ba6ea600ffcd13d5afb5a7ce9484055c87be3ef1e9d60bd290487a266929e1a9229c93762a2aed6f64b7dac69d5fc6460f49b6b6e63df9a52b1f53ec3b726a
- SSDEEP 12288:mcv0NT+IXVy0F9Xoo9v6H0B2Iff7DfORsk1YUP7DMJN81RMMWc:mcvkT+Mg0jX59iH0B1fTDfgs2YUUJN8F
- TLSH T134C41214B6D140FBD5E1497110AA621BBB79AB302770A8EBC7DC3C92C953AC4963C3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled