General
- Target RestoEmu V3.exe
- Size 6.0MB
- Sample260909-wd133azyft
- SHA256 26862249482f239eb5351660db55c2eef317793c3b3d0db4863f2b89bbcc12cb
- MD5 d36acdc3f01c67b3b504c1f677fbf6cf
- SHA1 266137bf99b1336f6a2da8b2f001fc9969bc4e72
- SHA512 80497648f5069ea3b1773e4b28f5ece98d8a43808f6070bd3f4e51830b9b0c168ab9dd07bc71912c6407b803ae6ee515f4312a314168a1a3b6276291912a426b
- SSDEEP 1536:soI6K5BzO8oL75InJs39WUiNMQAKNrV4K9ItyhxT1jVSZ:so5K5OVIJs39WrJrV4K9IghxT1jV
- TLSH T18956A41423D88605F5BF1BB9DAB5C2729331BCA65932D30E0AD57DDB39327408E96B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RestoEmu V3.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
RestoEmu V3.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target RestoEmu V3.exe
- Size 6.0MB
- SHA256 26862249482f239eb5351660db55c2eef317793c3b3d0db4863f2b89bbcc12cb
- MD5 d36acdc3f01c67b3b504c1f677fbf6cf
- SHA1 266137bf99b1336f6a2da8b2f001fc9969bc4e72
- SHA512 80497648f5069ea3b1773e4b28f5ece98d8a43808f6070bd3f4e51830b9b0c168ab9dd07bc71912c6407b803ae6ee515f4312a314168a1a3b6276291912a426b
- SSDEEP 1536:soI6K5BzO8oL75InJs39WUiNMQAKNrV4K9ItyhxT1jVSZ:so5K5OVIJs39WrJrV4K9IghxT1jV
- TLSH T18956A41423D88605F5BF1BB9DAB5C2729331BCA65932D30E0AD57DDB39327408E96B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.