General
- Target b6bfa5a66f1cdaf0f60eea689a73cff6ffab42458fb2ed4dd06cde7f8ab245b7
- Size 927KB
- Sample260909-ej488s1wfw
- SHA256 b6bfa5a66f1cdaf0f60eea689a73cff6ffab42458fb2ed4dd06cde7f8ab245b7
- MD5 e11a58e8fef83f5dfe0dfef19654456b
- SHA1 ce8d8b75a41a8ad3b4027bcb279ca8d7f0e9e568
- SHA512 f07076d31d64ec445b036ada8e3b06db887a59651a68c61c4d5cd39e5fa5d8a5c8519b9488bc68c36f8eab88ad07b1ca50a284a1426bdf952801f7f2b4a9e338
- SSDEEP 24576:TnvS+55BpfRX95rp/whxtpmS44qYsStBIJ0RD:rKA5/fBjlwhxvmS4SDtBS0RD
- TLSH T14115D019D7E405F9E1B3E574CE834902EB73BC495371D69F03ACA9661F236908E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b6bfa5a66f1cdaf0f60eea689a73cff6ffab42458fb2ed4dd06cde7f8ab245b7.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
b6bfa5a66f1cdaf0f60eea689a73cff6ffab42458fb2ed4dd06cde7f8ab245b7.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target b6bfa5a66f1cdaf0f60eea689a73cff6ffab42458fb2ed4dd06cde7f8ab245b7
- Size 927KB
- SHA256 b6bfa5a66f1cdaf0f60eea689a73cff6ffab42458fb2ed4dd06cde7f8ab245b7
- MD5 e11a58e8fef83f5dfe0dfef19654456b
- SHA1 ce8d8b75a41a8ad3b4027bcb279ca8d7f0e9e568
- SHA512 f07076d31d64ec445b036ada8e3b06db887a59651a68c61c4d5cd39e5fa5d8a5c8519b9488bc68c36f8eab88ad07b1ca50a284a1426bdf952801f7f2b4a9e338
- SSDEEP 24576:TnvS+55BpfRX95rp/whxtpmS44qYsStBIJ0RD:rKA5/fBjlwhxvmS4SDtBS0RD
- TLSH T14115D019D7E405F9E1B3E574CE834902EB73BC495371D69F03ACA9661F236908E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL