General
- Target file.exe
- Size 441KB
- Sample260918-wrj2psbc76
- SHA256 9a0369f05cd24b818b5885b3866643d168f6f4216724641ca540613972e9e682
- MD5 bbe1ee37a45615d1a3d8a4779257e184
- SHA1 085256b51f65ab69c8821fc2798ba0acf43cd711
- SHA512 3d0462eebf4f3e081a906ab5077eb72bb0271e3adbd7d598e750f02ab71a31fd5066423732681eee2a8d7656525ddf56d4ca82da72a859e22022f4e5d2f1f127
- SSDEEP 6144:EPDYVOXvcZu4oVp7y3BiTHKpASdlt+xW7uTHD:2YVOXT7yt1ngD
- TLSH T1D9A4F847EB7550F4C876C0788AA26227B9717C5C5334ABDB8B508E521F23BE1E93EB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
darkvision
C2
-
103.20.235.24
Targets
-
- Target file.exe
- Size 441KB
- SHA256 9a0369f05cd24b818b5885b3866643d168f6f4216724641ca540613972e9e682
- MD5 bbe1ee37a45615d1a3d8a4779257e184
- SHA1 085256b51f65ab69c8821fc2798ba0acf43cd711
- SHA512 3d0462eebf4f3e081a906ab5077eb72bb0271e3adbd7d598e750f02ab71a31fd5066423732681eee2a8d7656525ddf56d4ca82da72a859e22022f4e5d2f1f127
- SSDEEP 6144:EPDYVOXvcZu4oVp7y3BiTHKpASdlt+xW7uTHD:2YVOXT7yt1ngD
- TLSH T1D9A4F847EB7550F4C876C0788AA26227B9717C5C5334ABDB8B508E521F23BE1E93EB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.