General
- Target df5f65a11a427f79a883b7801711b3a1691e72040b5c6fee04bd042d5960f65b
- Size 2.9MB
- Sample260928-e7fwjsvdjg
- SHA256 df5f65a11a427f79a883b7801711b3a1691e72040b5c6fee04bd042d5960f65b
- MD5 30d1139106398eca7696eb1f0b4e63b8
- SHA1 e9590d3d39fac9d59940a045735153a8d8006a14
- SHA512 2b0cf32cc25f1ce82743aaed7572fc1c97c24a9081bb0fb9974c282e08c691b2124ad4fcc71f81a19cd44dcea6bc7d9f0a760e31769d33699b7656d464bb7805
- SSDEEP 49152:9B2OlmfnyaD0pooijHnUCPKYqEaDUGYZp2Tb6zjOCA:9BOfaooiznZXqvUhgb6zSCA
- TLSH T191E53386A7E051F0E877D030C82A4D99E77B78602774AE1F93E843365F2315A2D6CB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
df5f65a11a427f79a883b7801711b3a1691e72040b5c6fee04bd042d5960f65b.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
df5f65a11a427f79a883b7801711b3a1691e72040b5c6fee04bd042d5960f65b.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target df5f65a11a427f79a883b7801711b3a1691e72040b5c6fee04bd042d5960f65b
- Size 2.9MB
- SHA256 df5f65a11a427f79a883b7801711b3a1691e72040b5c6fee04bd042d5960f65b
- MD5 30d1139106398eca7696eb1f0b4e63b8
- SHA1 e9590d3d39fac9d59940a045735153a8d8006a14
- SHA512 2b0cf32cc25f1ce82743aaed7572fc1c97c24a9081bb0fb9974c282e08c691b2124ad4fcc71f81a19cd44dcea6bc7d9f0a760e31769d33699b7656d464bb7805
- SSDEEP 49152:9B2OlmfnyaD0pooijHnUCPKYqEaDUGYZp2Tb6zjOCA:9BOfaooiznZXqvUhgb6zSCA
- TLSH T191E53386A7E051F0E877D030C82A4D99E77B78602774AE1F93E843365F2315A2D6CB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE