General
- Target FieldLink.exe
- Size 127KB
- Sample260907-an5cksvgne
- SHA256 390217752807b0e69b6b60811ee0f618c793211a1cfdca4cb7deabbdad414a17
- MD5 64d52d066f81947b6e0d6424728167aa
- SHA1 063ec401eb24ee4a9f1f3ec72d14681b241c85ac
- SHA512 4b74ec1490ba6acc1b8f990034420d922f58a6cb726cc3bbff494dbf26bc06c50d33f051ca769ec53ea9961e8cbc3c00896c3e584047f3887ea53c2d05dfe759
- SSDEEP 3072:8YGqH2UxpKq+ftDYSlJQwku1fHVVSs/fZslCGDh:eGKwsJu6fDSs/fqC
- TLSH T1DFD3AE0473EC8F26E1BF8BB968F121014776B896A632D78D0DD650DE29B2F818D1476F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FieldLink.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
FieldLink.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target FieldLink.exe
- Size 127KB
- SHA256 390217752807b0e69b6b60811ee0f618c793211a1cfdca4cb7deabbdad414a17
- MD5 64d52d066f81947b6e0d6424728167aa
- SHA1 063ec401eb24ee4a9f1f3ec72d14681b241c85ac
- SHA512 4b74ec1490ba6acc1b8f990034420d922f58a6cb726cc3bbff494dbf26bc06c50d33f051ca769ec53ea9961e8cbc3c00896c3e584047f3887ea53c2d05dfe759
- SSDEEP 3072:8YGqH2UxpKq+ftDYSlJQwku1fHVVSs/fZslCGDh:eGKwsJu6fDSs/fqC
- TLSH T1DFD3AE0473EC8F26E1BF8BB968F121014776B896A632D78D0DD650DE29B2F818D1476F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates new service(s)
-
Executes dropped EXE
-
Modifies file permissions
-
Stops running service(s)