General
- Target 9f2690ef77c890363290c52e68eaa1f61915ed235cb8191cb8eacd98e619a81c
- Size 166KB
- Sample260912-thttfazflg
- SHA256 9f2690ef77c890363290c52e68eaa1f61915ed235cb8191cb8eacd98e619a81c
- MD5 8076951f4c5102a3d4c6a7773d393ec9
- SHA1 80cd607de8cb289290dbe988795645c1b1f2072e
- SHA512 3d78ac2cf2916c0e2d8e6261f112c722629ed016d7b7b7e697bf916c2242a2b3b7333484604424c6e7434f236fa14eadbcbdd243a1b7605d975777d1b74640c4
- SSDEEP 768:YVXL+uSm/e0sWcv26oWhoJ0h4h2hQJVNjDkp57xXp5Rmg5Fh4hqhxOhDhzhnhvh8:YZqNDWcv26owJh4h2hON6x5puwVT0hO
- TLSH T10FF30F6E74837812F04ABC7143BECBB146F3A9C615CE858E23168DDD3919C98D5B09EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9f2690ef77c890363290c52e68eaa1f61915ed235cb8191cb8eacd98e619a81c.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 9f2690ef77c890363290c52e68eaa1f61915ed235cb8191cb8eacd98e619a81c
- Size 166KB
- SHA256 9f2690ef77c890363290c52e68eaa1f61915ed235cb8191cb8eacd98e619a81c
- MD5 8076951f4c5102a3d4c6a7773d393ec9
- SHA1 80cd607de8cb289290dbe988795645c1b1f2072e
- SHA512 3d78ac2cf2916c0e2d8e6261f112c722629ed016d7b7b7e697bf916c2242a2b3b7333484604424c6e7434f236fa14eadbcbdd243a1b7605d975777d1b74640c4
- SSDEEP 768:YVXL+uSm/e0sWcv26oWhoJ0h4h2hQJVNjDkp57xXp5Rmg5Fh4hqhxOhDhzhnhvh8:YZqNDWcv26owJh4h2hON6x5puwVT0hO
- TLSH T10FF30F6E74837812F04ABC7143BECBB146F3A9C615CE858E23168DDD3919C98D5B09EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application