General
- Target 253621c4243f2cb14419c17011f0a03dd358776feeae3633ec752156110be4f2
- Size 1.9MB
- Sample260910-3ygy9axele
- SHA256 253621c4243f2cb14419c17011f0a03dd358776feeae3633ec752156110be4f2
- MD5 01477b4c8dc30833324003ab98b4a81b
- SHA1 7299864e61b06879661aef08eabeed16de2d627a
- SHA512 7e5da19ef77e380d5c3daa7fee8bf76f992996489a3f172b7314d2447822f446a27dabfba809e751c5255f1e0cd46b7a8a951c057656467c3869e89e8f26dd76
- SSDEEP 49152:vd2heiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCz3KTZXIU6is9:vd2ZiFFQN7BiB06q+s9
- TLSH T183956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
253621c4243f2cb14419c17011f0a03dd358776feeae3633ec752156110be4f2.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
253621c4243f2cb14419c17011f0a03dd358776feeae3633ec752156110be4f2.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 253621c4243f2cb14419c17011f0a03dd358776feeae3633ec752156110be4f2
- Size 1.9MB
- SHA256 253621c4243f2cb14419c17011f0a03dd358776feeae3633ec752156110be4f2
- MD5 01477b4c8dc30833324003ab98b4a81b
- SHA1 7299864e61b06879661aef08eabeed16de2d627a
- SHA512 7e5da19ef77e380d5c3daa7fee8bf76f992996489a3f172b7314d2447822f446a27dabfba809e751c5255f1e0cd46b7a8a951c057656467c3869e89e8f26dd76
- SSDEEP 49152:vd2heiSraGa7VHri7mitBPQnMiq8BRMLlPHE7MCz3KTZXIU6is9:vd2ZiFFQN7BiB06q+s9
- TLSH T183956D43E69581FCC05EC1B887579736FA32B88D053476EB2BD04B642E26F906F1DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.