General
- Target a078251c61a4f90bf60da47d99cea465be5d44057684d681fb3d94a20d2025bd.zip
- Size 2.0MB
- Sample260910-vq21fsem5z
- SHA256 0f685e64c6697287d7b55b62381e6f25a50b7f3932cbc1a922f629e645741107
- MD5 64dcc04fd489fd11d49433d01ea89bca
- SHA1 34fa64190b791b54c544a0af89ee286eb089c655
- SHA512 f4b8e660c91d512bfdd327dae9b05290c0540f87485a0169055bdd72aa3c21f28aabc69c0ed8e0b81e90dfdc71873ead813bc4a8f678f2c6372a551108ab6cb7
- SSDEEP 49152:Q7wFeslXxVcNRtfrUANwWhKQGu+0qcysagCAgouVH68LJ9/SpC3:Q8rtcN7wAGZ0NKgoJVFd9/GK
- TLSH T146A533A984F448D5FE2F84AD4121F16B8A878F18310FAA8117CB5C5591FB9ECC1D7AF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a078251c61a4f90bf60da47d99cea465be5d44057684d681fb3d94a20d2025bd.exe
Resource
win10ltsc2021-20260513-de
14 signatures
900 seconds
Malware Config
Targets
-
- Target a078251c61a4f90bf60da47d99cea465be5d44057684d681fb3d94a20d2025bd.exe
- Size 2.0MB
- SHA256 a078251c61a4f90bf60da47d99cea465be5d44057684d681fb3d94a20d2025bd
- MD5 1a2e2d295e04f74437652dc9b8a2d03c
- SHA1 e3565983ee402856c2cf4eec2ac6ff9636443fe9
- SHA512 7d5130ad41c4903aa66fc00b22bc3799ade4b6c3bb82db9aead43158aa03165159b59f8c16d8cf68fb297e69e6a13acc9708669d5916fe52b9254330c1f14df2
- SSDEEP 49152:0nE90klpPD4FwJa7AnlHLq5X2C77sf9ezdePyM2KGJOF:0nE9TpL4Fwa+lrq4C7If9e5+2KUO
- TLSH T177A5332CE8D2AB72C95B5FB9A027336C0BE95DCE4C4791663603206CE7B14B96D173E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.
-
Sets desktop wallpaper using registry