General
- Target 9edce3ca34703efcb315415c1c165e4068294805c5525cdb9682381b4d53486d
- Size 35KB
- Sample260907-xpkqwseq5s
- SHA256 9edce3ca34703efcb315415c1c165e4068294805c5525cdb9682381b4d53486d
- MD5 61b68d84dc614355649c4bfd6ae7e004
- SHA1 226dba80f7e2a8b825bb95cca1b37b6914921c87
- SHA512 93b7c3901133b7b857e000e8e26f7e07eacad049e16e9241619f8323d49d5ccfdee966a7eff0b8b2c97b198e5f3610a465f016c296313537cc6a2be1cc4a6517
- SSDEEP 768:6QXreJhpEvn//BkFkeKccGRp9S/t6z1QB6SnH538Qr8EU:6QXreM9ewGb9h1Qo8538jEU
- TLSH T157F22A1527C9867AF3BD5B7C6DF1610583B5E6A72603DA8A2C8401EB4923BC1CE41BF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9edce3ca34703efcb315415c1c165e4068294805c5525cdb9682381b4d53486d.exe
Resource
win10v2004-20260513-en
7 signatures
60 seconds
Behavioral task
behavioral2
Sample
9edce3ca34703efcb315415c1c165e4068294805c5525cdb9682381b4d53486d.exe
Resource
win11ltsc2024-20260709-en
6 signatures
60 seconds
Malware Config
Targets
-
- Target 9edce3ca34703efcb315415c1c165e4068294805c5525cdb9682381b4d53486d
- Size 35KB
- SHA256 9edce3ca34703efcb315415c1c165e4068294805c5525cdb9682381b4d53486d
- MD5 61b68d84dc614355649c4bfd6ae7e004
- SHA1 226dba80f7e2a8b825bb95cca1b37b6914921c87
- SHA512 93b7c3901133b7b857e000e8e26f7e07eacad049e16e9241619f8323d49d5ccfdee966a7eff0b8b2c97b198e5f3610a465f016c296313537cc6a2be1cc4a6517
- SSDEEP 768:6QXreJhpEvn//BkFkeKccGRp9S/t6z1QB6SnH538Qr8EU:6QXreM9ewGb9h1Qo8538jEU
- TLSH T157F22A1527C9867AF3BD5B7C6DF1610583B5E6A72603DA8A2C8401EB4923BC1CE41BF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.