General
- Target xpran.exe
- Size 176KB
- Sample260910-wkgm1aea68
- SHA256 7d3e6127ed491082533f466d9feef28129683771bb4f205ebee3ab0a9ec9a482
- MD5 8472f5d8b36a626f436b97b69fe341d7
- SHA1 c92b9b6664a82e533087431b57e04b4641ca78e1
- SHA512 2da45035fba909b541271bb7af0329a78bdabe341a538d45848503514b2ac87b63883739ce3015502331a8b7b0142f2f96a75c67bd9347643bc323f69f6932ea
- SSDEEP 3072:B+J78ujK3UNpslE6FE9kpXKyA4i/39rEfrfjqb1v2F0t7:B+q3UNpnuE9GXKgIYjfOt
- TLSH T1C2046D46B3D910F9E0738178C9A10A06F772B82547616BEF43A4437ADF276D49E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xpran.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
xpran.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target xpran.exe
- Size 176KB
- SHA256 7d3e6127ed491082533f466d9feef28129683771bb4f205ebee3ab0a9ec9a482
- MD5 8472f5d8b36a626f436b97b69fe341d7
- SHA1 c92b9b6664a82e533087431b57e04b4641ca78e1
- SHA512 2da45035fba909b541271bb7af0329a78bdabe341a538d45848503514b2ac87b63883739ce3015502331a8b7b0142f2f96a75c67bd9347643bc323f69f6932ea
- SSDEEP 3072:B+J78ujK3UNpslE6FE9kpXKyA4i/39rEfrfjqb1v2F0t7:B+q3UNpnuE9GXKgIYjfOt
- TLSH T1C2046D46B3D910F9E0738178C9A10A06F772B82547616BEF43A4437ADF276D49E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.