General
- Target MDE_File_Sample_677dca08fc68a549be0d001bf2c29471ac8d1fd4.zip
- Size 507KB
- Sample260908-j68x6aeb68
- SHA256 fb6a5977da76163a99f93c485f8d199ecd47d76763a3ca2ef29c9ef3c69fd7b5
- MD5 0a6c78000afa64d2530b758f504e15cb
- SHA1 e5d29cbc0264898be9a9e708aa780b4836c44525
- SHA512 aff7188758eb945df665788f99a2c9fb0e7eb805c08a47a1bddf36a3ec1ab6b09379212a4ad69e82f0ff04cf9cfbe9e6b81373c5daf4fa0fd7a60fc29e25490f
- SSDEEP 12288:o930SOgjrYcHB7LHXqs2gwODfnIxUVIThc/MTq/jui5gM3:oCSOgfY0HaBg3DnIVTh8lbutM
- TLSH T190B423CB1C78AB6F7F1E2A1F3B1CF0428ACA91C757A2434F62B47736258CB166156390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
677dca08fc68a549be0d001bf2c29471ac8d1fd4.exe
Resource
win10v2004-20260513-en
20 signatures
900 seconds
Behavioral task
behavioral2
Sample
677dca08fc68a549be0d001bf2c29471ac8d1fd4.exe
Resource
win11ltsc2024-20260709-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target 677dca08fc68a549be0d001bf2c29471ac8d1fd4
- Size 616KB
- SHA256 83fe567272ef07f7ab68cdc3dbd95ab64665e3ec9bae12a0cab533e128c3bd06
- MD5 15d067f0c58a63a04c27519cebb14afc
- SHA1 677dca08fc68a549be0d001bf2c29471ac8d1fd4
- SHA512 2f3faec5d6e99ee9515181da27bc39beff6b551c89dde5a4b5a71ef75b90ca73cee821060537e4ac98350250ee38faec913b69063a4ddf59585f1bc05b5653f4
- SSDEEP 12288:0aYfGW94GH7Q+C+7ORUP/cRvT+81tysRz23FznZh1HbH7ZQo7xYdGANbb:AfGW2GHn7ORUP/cRrt1Da3io7xFsbb
- TLSH T131D4F12235E0C07BC59716324DF69BB5B7B3FE614E32894B2B585B0D2F31A41DA29336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL