General
- Target Anketirovanie.exe
- Size 128KB
- Sample260913-alkkdshr3w
- SHA256 444b373fcf1efca9948b80ffd255f20585219105dd43ed99462053e26735407a
- MD5 05bf3a9fcb5febf254f477e1d04c70ff
- SHA1 13dc21a17e30fbd8dfb0350a40d4732302fe939e
- SHA512 4a977805824eb7ec711353e02ca442b4e2abaa161bfb0061ee6e806cc778fc4247a71a79ab46da3ad857970c37759ef08c2932da893bdd96fcedf71628cc6890
- SSDEEP 1536:JiXjvhgOfvCbcGzVeoqz5DL1ApcbNnpa2IzFlDN6kw1P/x:+NgqCbcqVeoqz5DL1AmbLa2IzJ6k2x
- TLSH T1A4D31E3FE01802AFD23694F6CE975D56F5A96D03361DE08CE4C2A72BC067152E1E52AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Anketirovanie.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Anketirovanie.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Anketirovanie.exe
- Size 128KB
- SHA256 444b373fcf1efca9948b80ffd255f20585219105dd43ed99462053e26735407a
- MD5 05bf3a9fcb5febf254f477e1d04c70ff
- SHA1 13dc21a17e30fbd8dfb0350a40d4732302fe939e
- SHA512 4a977805824eb7ec711353e02ca442b4e2abaa161bfb0061ee6e806cc778fc4247a71a79ab46da3ad857970c37759ef08c2932da893bdd96fcedf71628cc6890
- SSDEEP 1536:JiXjvhgOfvCbcGzVeoqz5DL1ApcbNnpa2IzFlDN6kw1P/x:+NgqCbcqVeoqz5DL1AmbLa2IzJ6k2x
- TLSH T1A4D31E3FE01802AFD23694F6CE975D56F5A96D03361DE08CE4C2A72BC067152E1E52AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.