General
- Target 3bfd2f03c31a7f523f0d77c74989b02a347a490992e957f4c585dcbccfad9643
- Size 888KB
- Sample260907-sdjx1axwas
- SHA256 3bfd2f03c31a7f523f0d77c74989b02a347a490992e957f4c585dcbccfad9643
- MD5 4f72b366ebdf57f96f5a98cf9fc94d70
- SHA1 813d0b1ee01db4570e15c4ee0bf23deaad7e0fe3
- SHA512 b83ee961a69b52cd494fc036b56f59550c988359aa90724759435be35ced399b38a7dbad97039219ab5eb310b8079884dcc008d98e2a5338f6975ec5eda54ac0
- SSDEEP 24576:/SGAjPDXDuQl89kRmSf001UTa6jp7deT2hNUVHliheQ:KVLDXpvRmSf091pMmf
- TLSH T11A1533016ACE63CFF93719F5960A7818F028637D16017050C3DA496E0FDB359AEF7AA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ដំណឹងជ្រើសរើសបុគ្គលិកផ្នែកហិរញ្ញវ�.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ដំណឹងជ្រើសរើសបុគ្គលិកផ្នែកហិរញ្ញវ�.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ដំណឹងជ្រើសរើសបុគ្គលិកផ្នែកហិរញ្ញវត្ថុបន្ទាន់ ប្រាក់ខែខ្ពស់.exe
- Size 2.4MB
- SHA256 8edb816fad5bc8fce1ac93b64398f7187d3074313f6c7734a51dd85200fe3a02
- MD5 6a9206f1860ee5a05c112ce843d4e506
- SHA1 d2c3d56b7d5cb70cc2b459b0563f93c984573dc1
- SHA512 d9d5bebc4768dc83d2948da859114d249188bd33460fde1693b753b9d90c6dd5832df623fe0d514a9573ee482803bb70f8faf65ac8de00b3df2c1bc76f2d1b2e
- SSDEEP 24576:eCvnXZkdlwP4aHHjnNIkG889X4asVrvcEvsjpSVaEmbSQgJeAbhe0:eCvpkdlPIHjc9X4asVrvj0jApmL4
- TLSH T1F6C52803709540AEE41A98BA474A8131E9B07CD517B5E2CF1A90B71F0EF77E41A3EF96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE