General
- Target 2b89a80b8fca097303d3a2f03be47801.exe
- Size 84KB
- Sample260910-gh3ecsygmh
- SHA256 387be2d636d808f48d521fc40c7fe16f1016d577d6692f9d856ca4d321dea0e6
- MD5 2b89a80b8fca097303d3a2f03be47801
- SHA1 63a63a9bfe61baa8f0829b0fa4103ab14c8ecaed
- SHA512 89ad6e9619f63900ebb4b61b10c24e12b743da01f5b5e14303992af3d158c7bfd2fd19feea496ed9e414a90d6ad4bb94aba58a123a39e1de2e9a6f9057d3f938
- SSDEEP 768:0fA9rY18fxkpNYnJN+B3U/RDM8RWwuQh1kEJ7kkzLEDtAn7AiRFi0o3AhRKBBRHc:0qC8fx+WN+BCDfvNJ7ke3buAhoB2yi
- TLSH T180835A11F251C036F0F700BAC7B6477E9DACAF21636860DB93D856A99F21AC1BA31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b89a80b8fca097303d3a2f03be47801.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b89a80b8fca097303d3a2f03be47801.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2b89a80b8fca097303d3a2f03be47801.exe
- Size 84KB
- SHA256 387be2d636d808f48d521fc40c7fe16f1016d577d6692f9d856ca4d321dea0e6
- MD5 2b89a80b8fca097303d3a2f03be47801
- SHA1 63a63a9bfe61baa8f0829b0fa4103ab14c8ecaed
- SHA512 89ad6e9619f63900ebb4b61b10c24e12b743da01f5b5e14303992af3d158c7bfd2fd19feea496ed9e414a90d6ad4bb94aba58a123a39e1de2e9a6f9057d3f938
- SSDEEP 768:0fA9rY18fxkpNYnJN+B3U/RDM8RWwuQh1kEJ7kkzLEDtAn7AiRFi0o3AhRKBBRHc:0qC8fx+WN+BCDfvNJ7ke3buAhoB2yi
- TLSH T180835A11F251C036F0F700BAC7B6477E9DACAF21636860DB93D856A99F21AC1BA31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext