General
- Target spooferrr.exe
- Size 821KB
- Sample260916-xd1b7sthph
- SHA256 096f36981c1424d9e815be4fef0b11c1ad9b32bec9ad0e94b91c749d42e89905
- MD5 944312c509c41a68f28fec3133b0e2f3
- SHA1 05686f33da9797159681e629848d94d1cb4e3692
- SHA512 5c4dfff43ba087a0e56a08d279fa0abd9908d7a4c9b73c6308ff3feddfaa4795e6d56fbebc9499608a9e2a5c910acec54fb848b0af1f5ec050e104ee028bfe97
- SSDEEP 24576:paTV9+L5rcO5kWoOlh6PWpJa4hHmW7K8P3pyIH:p8EiO5AGWWraIHhjY4
- TLSH T198052307F68119BBD4C37B7895A873AC0B72DCB666650B23F7FA181B7C21934E95014A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
spooferrr.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
spooferrr.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target spooferrr.exe
- Size 821KB
- SHA256 096f36981c1424d9e815be4fef0b11c1ad9b32bec9ad0e94b91c749d42e89905
- MD5 944312c509c41a68f28fec3133b0e2f3
- SHA1 05686f33da9797159681e629848d94d1cb4e3692
- SHA512 5c4dfff43ba087a0e56a08d279fa0abd9908d7a4c9b73c6308ff3feddfaa4795e6d56fbebc9499608a9e2a5c910acec54fb848b0af1f5ec050e104ee028bfe97
- SSDEEP 24576:paTV9+L5rcO5kWoOlh6PWpJa4hHmW7K8P3pyIH:p8EiO5AGWWraIHhjY4
- TLSH T198052307F68119BBD4C37B7895A873AC0B72DCB666650B23F7FA181B7C21934E95014A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates new service(s)
-
Drops file in System32 directory