General
- Target TCPView.exe
- Size 258KB
- Sample260910-psr1dacl7t
- SHA256 9aaa51258126aae9be5e535d1cd475054cff60d5a735c2a54e387b788aa49673
- MD5 dc0bfb19b2d47ee7826773e3a12487b0
- SHA1 ae0926db8212ec353b8932c564a4c679de8fc3cd
- SHA512 5a8085e035b4fdcd5a9fe935e1011bd87b5a011afb81f141cecad5b84a59c6162af37b1ab63f09789c2147c4bae58126a50f548812c68f3c510a6072050b223e
- SSDEEP 6144:CUrqA3AheuswyPnZDGfPzaiBBXfbpOu0HIeUHZC:CUWA3AheuswyZGfP/BBXfbpd0HpU5C
- TLSH T14E44AE2236F7C47BE16D6134FA65A3FB8174AD20F4299207EBA43C1D3A317E9980D653
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TCPView.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target TCPView.exe
- Size 258KB
- SHA256 9aaa51258126aae9be5e535d1cd475054cff60d5a735c2a54e387b788aa49673
- MD5 dc0bfb19b2d47ee7826773e3a12487b0
- SHA1 ae0926db8212ec353b8932c564a4c679de8fc3cd
- SHA512 5a8085e035b4fdcd5a9fe935e1011bd87b5a011afb81f141cecad5b84a59c6162af37b1ab63f09789c2147c4bae58126a50f548812c68f3c510a6072050b223e
- SSDEEP 6144:CUrqA3AheuswyPnZDGfPzaiBBXfbpOu0HIeUHZC:CUWA3AheuswyZGfP/BBXfbpd0HpU5C
- TLSH T14E44AE2236F7C47BE16D6134FA65A3FB8174AD20F4299207EBA43C1D3A317E9980D653
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE