General
- Target 3b9069d010700255e981380f4df2f1bd30c3a63c87e7711c1d3a90206cf0f18a
- Size 3.2MB
- Sample260930-c2lthawsav
- SHA256 3b9069d010700255e981380f4df2f1bd30c3a63c87e7711c1d3a90206cf0f18a
- MD5 a87516d95fe5a4b81dca6c71a9f41cb3
- SHA1 74b7134ff502c38bcc4ee53b3605a88d36145cac
- SHA512 9a0dabc251c5bba19851588dc9081d57e255fbc3b7216746bdbf2280bef0d4d23342cb50e0d2f0d132240953c5cd6c30120e7da27c1b1f4aaaaae63d2489201c
- SSDEEP 49152:WYWH8RHchTCoAc2PgCnf3AmmGjpZ0FDt6TPOwtM4FS1lNiFRS:B68R8hpZ2PgCftjpGZ0OKFS1l
- TLSH T18CF57C10E381C42BFAB314F6966D875A7568BF304710A1DF93C42D9D27F96E12E31A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3b9069d010700255e981380f4df2f1bd30c3a63c87e7711c1d3a90206cf0f18a.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b9069d010700255e981380f4df2f1bd30c3a63c87e7711c1d3a90206cf0f18a.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3b9069d010700255e981380f4df2f1bd30c3a63c87e7711c1d3a90206cf0f18a
- Size 3.2MB
- SHA256 3b9069d010700255e981380f4df2f1bd30c3a63c87e7711c1d3a90206cf0f18a
- MD5 a87516d95fe5a4b81dca6c71a9f41cb3
- SHA1 74b7134ff502c38bcc4ee53b3605a88d36145cac
- SHA512 9a0dabc251c5bba19851588dc9081d57e255fbc3b7216746bdbf2280bef0d4d23342cb50e0d2f0d132240953c5cd6c30120e7da27c1b1f4aaaaae63d2489201c
- SSDEEP 49152:WYWH8RHchTCoAc2PgCnf3AmmGjpZ0FDt6TPOwtM4FS1lNiFRS:B68R8hpZ2PgCftjpGZ0OKFS1l
- TLSH T18CF57C10E381C42BFAB314F6966D875A7568BF304710A1DF93C42D9D27F96E12E31A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.