General
- Target AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
- Size 368.2MB
- Sample260909-eew23a1wbz
- SHA256 6620573a5dcb9d358b9e35332faf518f904646746c7096298122d0b0a66b5202
- MD5 efe759107ddde808effa8004e9f584a8
- SHA1 4d447e512bdc496a6338f683fa446607e123b283
- SHA512 735ca32064cdfff1f26fec2d87bd1480d63d95292e07140980adbc4e197a7267f5c389d304a8259fe671933192ad9ecd8e50e66fcb6e0c0f61a210b3fd3033e1
- SSDEEP 6291456:QgrI8FUAeg8f8uHrDbeOXIs0P9HprW0ZqFtLzz3KpsSD94+9AYGM4Q58kohlJW/:5TUAaf8uLDSO4TxIGkf62SS3Y54iohlS
- TLSH T16C0933F135669B6F3DE2AC0B1395460A8DB6635E8CC2F26530D52B7AEC10B81A714FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target AUD10R1TY..C0MP.EFF3CT52025.8.(leadguitar.mx).rar
- Size 368.2MB
- SHA256 6620573a5dcb9d358b9e35332faf518f904646746c7096298122d0b0a66b5202
- MD5 efe759107ddde808effa8004e9f584a8
- SHA1 4d447e512bdc496a6338f683fa446607e123b283
- SHA512 735ca32064cdfff1f26fec2d87bd1480d63d95292e07140980adbc4e197a7267f5c389d304a8259fe671933192ad9ecd8e50e66fcb6e0c0f61a210b3fd3033e1
- SSDEEP 6291456:QgrI8FUAeg8f8uHrDbeOXIs0P9HprW0ZqFtLzz3KpsSD94+9AYGM4Q58kohlJW/:5TUAaf8uLDSO4TxIGkf62SS3Y54iohlS
- TLSH T16C0933F135669B6F3DE2AC0B1395460A8DB6635E8CC2F26530D52B7AEC10B81A714FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.