General
- Target 24.6.1824.2.exe
- Size 733.5MB
- Sample260925-ndn5hadf82
- SHA256 32fb48c739953ba4a3dcb1970e39b52e1a3ca484c85be367dd561144b15ad4e6
- MD5 dcfd5411829471fdf7d46f0a4fc86f7c
- SHA1 8506b1012a013c583839f4bf764470b98e514f42
- SHA512 a7760276292332972e01bdf4da82fd8ee78a5e70ccdfea2f545c6586c3cc6ab9924fdea5133ee0d9a617205a4f0b90c207ea3e8d3b614102b1303853e6a7727f
- SSDEEP 12582912:7PjJ1tWxRaBwRtyYVw3BOAY3MeslRq9m/Oe20uo0VjS829RstAbXtTmRL19N:7PV1tNBaWBpY8es7qMd0VjS8xGTiLd
- TLSH T17B892303F2E18198D06B84348A6BB323F6317C19072496E797D0FE256F77BC06A7A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
24.6.1824.2.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
24.6.1824.2.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 24.6.1824.2.exe
- Size 733.5MB
- SHA256 32fb48c739953ba4a3dcb1970e39b52e1a3ca484c85be367dd561144b15ad4e6
- MD5 dcfd5411829471fdf7d46f0a4fc86f7c
- SHA1 8506b1012a013c583839f4bf764470b98e514f42
- SHA512 a7760276292332972e01bdf4da82fd8ee78a5e70ccdfea2f545c6586c3cc6ab9924fdea5133ee0d9a617205a4f0b90c207ea3e8d3b614102b1303853e6a7727f
- SSDEEP 12582912:7PjJ1tWxRaBwRtyYVw3BOAY3MeslRq9m/Oe20uo0VjS829RstAbXtTmRL19N:7PV1tNBaWBpY8es7qMd0VjS8xGTiLd
- TLSH T17B892303F2E18198D06B84348A6BB323F6317C19072496E797D0FE256F77BC06A7A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL