General
- Target AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
- Size 368.2MB
- Sample260909-eew23a1wbz
- SHA256 6620573a5dcb9d358b9e35332faf518f904646746c7096298122d0b0a66b5202
- MD5 efe759107ddde808effa8004e9f584a8
- SHA1 4d447e512bdc496a6338f683fa446607e123b283
- SHA512 735ca32064cdfff1f26fec2d87bd1480d63d95292e07140980adbc4e197a7267f5c389d304a8259fe671933192ad9ecd8e50e66fcb6e0c0f61a210b3fd3033e1
- SSDEEP 6291456:QgrI8FUAeg8f8uHrDbeOXIs0P9HprW0ZqFtLzz3KpsSD94+9AYGM4Q58kohlJW/:5TUAaf8uLDSO4TxIGkf62SS3Y54iohlS
- TLSH T16C0933F135669B6F3DE2AC0B1395460A8DB6635E8CC2F26530D52B7AEC10B81A714FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
- Size 368.2MB
- SHA256 6620573a5dcb9d358b9e35332faf518f904646746c7096298122d0b0a66b5202
- MD5 efe759107ddde808effa8004e9f584a8
- SHA1 4d447e512bdc496a6338f683fa446607e123b283
- SHA512 735ca32064cdfff1f26fec2d87bd1480d63d95292e07140980adbc4e197a7267f5c389d304a8259fe671933192ad9ecd8e50e66fcb6e0c0f61a210b3fd3033e1
- SSDEEP 6291456:QgrI8FUAeg8f8uHrDbeOXIs0P9HprW0ZqFtLzz3KpsSD94+9AYGM4Q58kohlJW/:5TUAaf8uLDSO4TxIGkf62SS3Y54iohlS
- TLSH T16C0933F135669B6F3DE2AC0B1395460A8DB6635E8CC2F26530D52B7AEC10B81A714FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.