General
- Target cbc3ca4890d20335a32c41bc1003f67bfea4281c8d7384727cb9a0423121a579
- Size 4.8MB
- Sample260908-ragg2acn9w
- SHA256 cbc3ca4890d20335a32c41bc1003f67bfea4281c8d7384727cb9a0423121a579
- MD5 2a9f5495952723a98a1e465ded8f7581
- SHA1 49752891154aac6464d55a9448b3c078cb7df20f
- SHA512 bc60c4b0c1f4638eebeaf5ab5ce70581a0a150c33424b2b0992dbaae3b067e841bc64b542e42e66524f3d86adcd57f1f040ecf911a224976b4bdf97ce4156aff
- SSDEEP 98304:H9e2xUQIM/KKdKdDWQhts3r/V3SrCOpp4XmC1qJTuQBVb5bKIUjSp:H9e2u7UC6l7t3SlyXmiATuQvVbKIUup
- TLSH T1273633B32A812CEC2D575E8BF48D27C1E8589EA60185F89F47DB8BD748415F50828FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinHex 21.6_x86_x64.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinHex 21.6_x86_x64.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target WinHex 21.6_x86_x64.exe
- Size 4.9MB
- SHA256 2e8bfac3f3690e477eee5a851005ed674aece1bc5d4d38094d77a221cba5579e
- MD5 311b6487b1727f86bcf36e912554ed61
- SHA1 c8793c31977aaf57239ee65db10eb6a3ddfc8e3d
- SHA512 50ae2819e6dd23dac0faae337627e4c66262ae4ffd4798f307d38425f5f27091b29deb50d4fd2cd5f28e2d1abc12a34fc4ddab484699e9fef959b1d6e0ba675b
- SSDEEP 98304:6L4G8+efwAUXATrO65Sk1rVdrS1Ui6U1CAxCZViyfz5dbgAUu7gk:6L4Gh2w4qwd/rSr1CmeViy77bgAUukk
- TLSH T1AC3633632AC01CF8D9972A77B4453B84E8ACEF750745A8DF57DA8C874A506F10828FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.