General
- Target m3389.exe
- Size 298KB
- Sample260910-prq2pacl2s
- SHA256 accf5fdeeeed4285a8da9956cb2a783a7d08429bfbf54bf28e2cf2f98480fb20
- MD5 ef2f9e1fc682df0ea89f3203b0f72dd3
- SHA1 d71c878d7450e18aef2afcc6efe15132c56ba52e
- SHA512 ca48d118eaed5fb0acafd18cd0c23ce45bc767511866236298ef6c400d0b9449ae46ffcab49c058a776ae18b793df23eb73242d034c46ad5a7d60a630a81d3f0
- SSDEEP 6144:x0BZUsxpclG4Vb9ewnEkxmgFLseAQdU+nMxZ+JUqEkVii7hVqX8wWsyXTcXA+57p:CBZUupclG4TREkcgl79nM+4kDe8Y5p5V
- TLSH T1D654128F8A22E5B8EC615474147B6A3F9E387E53492FDC93C556BCA93C33018A31B257
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
m3389.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target m3389.exe
- Size 298KB
- SHA256 accf5fdeeeed4285a8da9956cb2a783a7d08429bfbf54bf28e2cf2f98480fb20
- MD5 ef2f9e1fc682df0ea89f3203b0f72dd3
- SHA1 d71c878d7450e18aef2afcc6efe15132c56ba52e
- SHA512 ca48d118eaed5fb0acafd18cd0c23ce45bc767511866236298ef6c400d0b9449ae46ffcab49c058a776ae18b793df23eb73242d034c46ad5a7d60a630a81d3f0
- SSDEEP 6144:x0BZUsxpclG4Vb9ewnEkxmgFLseAQdU+nMxZ+JUqEkVii7hVqX8wWsyXTcXA+57p:CBZUupclG4TREkcgl79nM+4kDe8Y5p5V
- TLSH T1D654128F8A22E5B8EC615474147B6A3F9E387E53492FDC93C556BCA93C33018A31B257
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory