General
- Target AstralClient.exe
- Size 9.0MB
- Sample260907-sdqqjsxwax
- SHA256 8087800643a23250a245810ff423fa65c79f6145ffc4610da6b6cbc745ef5c78
- MD5 d954ad632c1c16afdef417638a416f17
- SHA1 48c0175c3719468fcf2984f3b7c79292008db4d4
- SHA512 b194c2272dde4526787d6f826c3688dfbcfba0c976c9c15c58134470d71c8bcd1cdb0235fa878ddd2b02f7dbaabe1b2b5c89eef5c9ef2821cb85a74f0202132e
- SSDEEP 98304:fLcnBW/M0x2CFnOVn+bMkz6StXzvm0rtiSVEH/Wjzge15K0yY9W1gdY0B/Wjzge/:zbko6SfYksu8c5T9WKdpu8c5
- TLSH T11B96CF86B3944099C067C238CA6BDBA6E3357C055B216FEB2144BE1B3F73AD06E39751
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AstralClient.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target AstralClient.exe
- Size 9.0MB
- SHA256 8087800643a23250a245810ff423fa65c79f6145ffc4610da6b6cbc745ef5c78
- MD5 d954ad632c1c16afdef417638a416f17
- SHA1 48c0175c3719468fcf2984f3b7c79292008db4d4
- SHA512 b194c2272dde4526787d6f826c3688dfbcfba0c976c9c15c58134470d71c8bcd1cdb0235fa878ddd2b02f7dbaabe1b2b5c89eef5c9ef2821cb85a74f0202132e
- SSDEEP 98304:fLcnBW/M0x2CFnOVn+bMkz6StXzvm0rtiSVEH/Wjzge15K0yY9W1gdY0B/Wjzge/:zbko6SfYksu8c5T9WKdpu8c5
- TLSH T11B96CF86B3944099C067C238CA6BDBA6E3357C055B216FEB2144BE1B3F73AD06E39751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.