General
- Target 3fa2b6b5c5eb32efe1f1a94df0a5164c25cf8b4a77f30127a5c52135e0c19cf3
- Size 2.4MB
- Sample260925-ktx6katy2m
- SHA256 3fa2b6b5c5eb32efe1f1a94df0a5164c25cf8b4a77f30127a5c52135e0c19cf3
- MD5 aeef64f0639a613b17dcbe3b7e7a8794
- SHA1 ec2c49c4a12c96819b407c14ab61b49ac141d4ff
- SHA512 8e9e4dc19f20bec66639b7f43834985b595814d903df45208b8ef38a54495f0adfeb91c0b00a4774564e0dc1375adeb6cbca0fc72b8e7d0fc8c6215204bd6475
- SSDEEP 49152:DcattCY5aVnwupFeGQ9rzUnSMBprnZWmQ:wotCY5a1woFeGQ9rwndprR
- TLSH T12CB5AF1177D2C0F6D55A163008B6A73A9E35FB414B24DBC3A398EE7E5C312C19A3B35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3fa2b6b5c5eb32efe1f1a94df0a5164c25cf8b4a77f30127a5c52135e0c19cf3.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3fa2b6b5c5eb32efe1f1a94df0a5164c25cf8b4a77f30127a5c52135e0c19cf3.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 3fa2b6b5c5eb32efe1f1a94df0a5164c25cf8b4a77f30127a5c52135e0c19cf3
- Size 2.4MB
- SHA256 3fa2b6b5c5eb32efe1f1a94df0a5164c25cf8b4a77f30127a5c52135e0c19cf3
- MD5 aeef64f0639a613b17dcbe3b7e7a8794
- SHA1 ec2c49c4a12c96819b407c14ab61b49ac141d4ff
- SHA512 8e9e4dc19f20bec66639b7f43834985b595814d903df45208b8ef38a54495f0adfeb91c0b00a4774564e0dc1375adeb6cbca0fc72b8e7d0fc8c6215204bd6475
- SSDEEP 49152:DcattCY5aVnwupFeGQ9rzUnSMBprnZWmQ:wotCY5a1woFeGQ9rwndprR
- TLSH T12CB5AF1177D2C0F6D55A163008B6A73A9E35FB414B24DBC3A398EE7E5C312C19A3B35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes a VBScript file via the Windows Script Host.