General
- Target 36d21dd83d7c44184e0da1c744c060a883bcdf58abf91340bf3cbf27e0640be5
- Size 530KB
- Sample260910-3yw36shr7y
- SHA256 36d21dd83d7c44184e0da1c744c060a883bcdf58abf91340bf3cbf27e0640be5
- MD5 f67edfc87439588a505f65ab4df47519
- SHA1 7a6e0cfd7416af3827d846c764c97bdc4d476eab
- SHA512 a427c190e333a26d903d78579c85c325a2dcd6912a62645675d31c2287b269c8777a1474aa508f04bc75ddd60e7e200473591e4a11417765ed847e1c27fc9e1c
- SSDEEP 12288:Nkf9jmlF+tHmvEEPIPB2RfOeAWFm2Z8an:6AeII5kEW82Z1n
- TLSH T134B46B21B996D032D55605B05AB8DFF59A7DBD700FE469DB73C02EBA8D302C16B30B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
36d21dd83d7c44184e0da1c744c060a883bcdf58abf91340bf3cbf27e0640be5.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
36d21dd83d7c44184e0da1c744c060a883bcdf58abf91340bf3cbf27e0640be5.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 36d21dd83d7c44184e0da1c744c060a883bcdf58abf91340bf3cbf27e0640be5
- Size 530KB
- SHA256 36d21dd83d7c44184e0da1c744c060a883bcdf58abf91340bf3cbf27e0640be5
- MD5 f67edfc87439588a505f65ab4df47519
- SHA1 7a6e0cfd7416af3827d846c764c97bdc4d476eab
- SHA512 a427c190e333a26d903d78579c85c325a2dcd6912a62645675d31c2287b269c8777a1474aa508f04bc75ddd60e7e200473591e4a11417765ed847e1c27fc9e1c
- SSDEEP 12288:Nkf9jmlF+tHmvEEPIPB2RfOeAWFm2Z8an:6AeII5kEW82Z1n
- TLSH T134B46B21B996D032D55605B05AB8DFF59A7DBD700FE469DB73C02EBA8D302C16B30B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application