General
- Target 514d13d0bb634f4b8f7645d22e740ec191f2157ce4fd4c754452e3a139d7a4f8
- Size 434KB
- Sample260910-3zaxbsxepf
- SHA256 514d13d0bb634f4b8f7645d22e740ec191f2157ce4fd4c754452e3a139d7a4f8
- MD5 85df3bcca3e4804f4e8c3bc5bc459750
- SHA1 5ff9da810c6acf8b97818c1f60d1e36532816081
- SHA512 207e5fed360813e22d29c2f353c3cf6a3a8f661f0ef7c5da51faeacb0a2cededbd42a0552b144983d158e8cb4e11c751d2d678757ed163486a5c960a2a0e695a
- SSDEEP 6144:JLH/ZjflZNa1hbvJ0o0oDzr7QyDUye/8rtVtgH9+AoYlW57L4VV3jofMq25h7c:bpTavD0oHr7FekrtsAAoYlgL4HB3hA
- TLSH T1D89423DD734DCEA2D44420BF6FCF618853B0D8EB6561E38679D6130FAD863C7A628026
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
514d13d0bb634f4b8f7645d22e740ec191f2157ce4fd4c754452e3a139d7a4f8.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
514d13d0bb634f4b8f7645d22e740ec191f2157ce4fd4c754452e3a139d7a4f8.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 514d13d0bb634f4b8f7645d22e740ec191f2157ce4fd4c754452e3a139d7a4f8
- Size 434KB
- SHA256 514d13d0bb634f4b8f7645d22e740ec191f2157ce4fd4c754452e3a139d7a4f8
- MD5 85df3bcca3e4804f4e8c3bc5bc459750
- SHA1 5ff9da810c6acf8b97818c1f60d1e36532816081
- SHA512 207e5fed360813e22d29c2f353c3cf6a3a8f661f0ef7c5da51faeacb0a2cededbd42a0552b144983d158e8cb4e11c751d2d678757ed163486a5c960a2a0e695a
- SSDEEP 6144:JLH/ZjflZNa1hbvJ0o0oDzr7QyDUye/8rtVtgH9+AoYlW57L4VV3jofMq25h7c:bpTavD0oHr7FekrtsAAoYlgL4HB3hA
- TLSH T1D89423DD734DCEA2D44420BF6FCF618853B0D8EB6561E38679D6130FAD863C7A628026
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext