General
- Target eqicord.exe
- Size 11.5MB
- Sample260910-ryqqlsvdqc
- SHA256 3a9fa4b6657d98ae6ae3ab34e490b5d1d322fcf6c516be5e8eef20d58557df58
- MD5 c5820dc59a7ff56489f5f854667c549c
- SHA1 5c7f15581dba76479de64157b4b6415764f190ca
- SHA512 0f552e8ac44a8155f4338bfa03414b1a475a6bcd1df0cac04fb76c4be9cc2c5811c27836d0569fa0be6934ca4fa98bf9dab4f9775d3c482166ef2ca18194c96a
- SSDEEP 98304:CXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFRo:C4EjXPiPbMy9GFkDPx
- TLSH T107C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eqicord.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
eqicord.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target eqicord.exe
- Size 11.5MB
- SHA256 3a9fa4b6657d98ae6ae3ab34e490b5d1d322fcf6c516be5e8eef20d58557df58
- MD5 c5820dc59a7ff56489f5f854667c549c
- SHA1 5c7f15581dba76479de64157b4b6415764f190ca
- SHA512 0f552e8ac44a8155f4338bfa03414b1a475a6bcd1df0cac04fb76c4be9cc2c5811c27836d0569fa0be6934ca4fa98bf9dab4f9775d3c482166ef2ca18194c96a
- SSDEEP 98304:CXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFRo:C4EjXPiPbMy9GFkDPx
- TLSH T107C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE