General
- Target eqicord.exe
- Size 11.5MB
- Sample260910-rxrxaavdpa
- SHA256 d89b6ae3967aa91c1467cc466d1cfb34f5e0bd5e96faa083106eb56c4af02ecf
- MD5 9c669ccd3d9da6d49999f7c232d3c706
- SHA1 afda588d43e6c5bed48914c979512609174c806f
- SHA512 ceaade94ed07e2be2a6313b17c14867005c5df51ad01b603a82a1f90eae267bae6b40346301e5baed94d5232c859b067edacc8dae689edce7e62d24f31f5ebb1
- SSDEEP 98304:FXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFR9:F4EjXPiPbMy9GFkDPm
- TLSH T164C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eqicord.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
eqicord.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target eqicord.exe
- Size 11.5MB
- SHA256 d89b6ae3967aa91c1467cc466d1cfb34f5e0bd5e96faa083106eb56c4af02ecf
- MD5 9c669ccd3d9da6d49999f7c232d3c706
- SHA1 afda588d43e6c5bed48914c979512609174c806f
- SHA512 ceaade94ed07e2be2a6313b17c14867005c5df51ad01b603a82a1f90eae267bae6b40346301e5baed94d5232c859b067edacc8dae689edce7e62d24f31f5ebb1
- SSDEEP 98304:FXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFR9:F4EjXPiPbMy9GFkDPm
- TLSH T164C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE