General
- Target 0df800b6ce592424415d2af43e41b7ac78a054b98cf17b8a47b935cde7514fab
- Size 736KB
- Sample260912-1tra1swcpg
- SHA256 0df800b6ce592424415d2af43e41b7ac78a054b98cf17b8a47b935cde7514fab
- MD5 9a9a65f33a35858df03ae268541a6f4e
- SHA1 815bb2322db9c1fb74cf07c7fe5868a4841cf5f7
- SHA512 84d10bc911e8fde3ea3b9077c2162c60e8139aa2615e73ffa07e0663ff3034c9b5959f185af3192f691e9f8088cea661d64520c9d22a7ad4c71e51e90f20a719
- SSDEEP 12288:6M+o+az9J87M2pUWR05GGRTgeUS3VgSLFb1MHOMQ201tduv7OH7XEN1nh:6MHhZrWR6G6cRS3VTLFbu8tEqA1nh
- TLSH T1C0F4011037E8062EE2FF8B39A47121758736BF57E52ECB4D0D85B0AD19A277194313AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
0df800b6ce592424415d2af43e41b7ac78a054b98cf17b8a47b935cde7514fab.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 0df800b6ce592424415d2af43e41b7ac78a054b98cf17b8a47b935cde7514fab
- Size 736KB
- SHA256 0df800b6ce592424415d2af43e41b7ac78a054b98cf17b8a47b935cde7514fab
- MD5 9a9a65f33a35858df03ae268541a6f4e
- SHA1 815bb2322db9c1fb74cf07c7fe5868a4841cf5f7
- SHA512 84d10bc911e8fde3ea3b9077c2162c60e8139aa2615e73ffa07e0663ff3034c9b5959f185af3192f691e9f8088cea661d64520c9d22a7ad4c71e51e90f20a719
- SSDEEP 12288:6M+o+az9J87M2pUWR05GGRTgeUS3VgSLFb1MHOMQ201tduv7OH7XEN1nh:6MHhZrWR6G6cRS3VTLFbu8tEqA1nh
- TLSH T1C0F4011037E8062EE2FF8B39A47121758736BF57E52ECB4D0D85B0AD19A277194313AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Modifies RDP port number used by Windows
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.