General
- Target 38b040380f68a101ac731929f1d1d67be1339cb758b58d4a7a97a7190dc84d26
- Size 4.8MB
- Sample260910-qx3hcathng
- SHA256 38b040380f68a101ac731929f1d1d67be1339cb758b58d4a7a97a7190dc84d26
- MD5 1df3307ff8e8f8da56220224a9cca988
- SHA1 0562bc85377e8d01ba1af54ed48a40e9bbed96f9
- SHA512 b15780adfb3fa1eeb9d1cc2f57ece5233696548aebf2653ef4746be927464a5a54fcd7f8799f983f7e3d5865965c6bb2c481a4345347da59937a2c147bb24e5c
- SSDEEP 49152:Ew9w9w9w9wLw9w9w9w8w9w9w9w9wLw9w9w9w8w9w9w9wF:ZKKKKsKKKxKKKKsKKKxKKKF
- TLSH T1E836AE07B3D18262C5824671CAA169F6E770AF3987125FD3A34C7F0ABE712D0DDB119A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
38b040380f68a101ac731929f1d1d67be1339cb758b58d4a7a97a7190dc84d26.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 38b040380f68a101ac731929f1d1d67be1339cb758b58d4a7a97a7190dc84d26
- Size 4.8MB
- SHA256 38b040380f68a101ac731929f1d1d67be1339cb758b58d4a7a97a7190dc84d26
- MD5 1df3307ff8e8f8da56220224a9cca988
- SHA1 0562bc85377e8d01ba1af54ed48a40e9bbed96f9
- SHA512 b15780adfb3fa1eeb9d1cc2f57ece5233696548aebf2653ef4746be927464a5a54fcd7f8799f983f7e3d5865965c6bb2c481a4345347da59937a2c147bb24e5c
- SSDEEP 49152:Ew9w9w9w9wLw9w9w9w8w9w9w9w9wLw9w9w9w8w9w9w9wF:ZKKKKsKKKxKKKKsKKKxKKKF
- TLSH T1E836AE07B3D18262C5824671CAA169F6E770AF3987125FD3A34C7F0ABE712D0DDB119A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE