General
- Target d5b75afa907d0319cb882da437539b700ca446ace13407bd3c84f9f003bab411.exe
- Size 19.8MB
- Sample260930-jreqrsxscz
- SHA256 d5b75afa907d0319cb882da437539b700ca446ace13407bd3c84f9f003bab411
- MD5 535fb7bcb44cbdf8be7ffd15f3cff9df
- SHA1 1dd5204b27d88e533ac69f77ff2d372229ebc528
- SHA512 084747ee75e9604b79149b269ba55064a906929614c78fd5c7643992702a90364ed1ccec2c88da7ded157eeff68f82f408a4c2f990b55961a124e3d8544c590d
- SSDEEP 393216:+i6ohU+8bjJ8gQq9ySZ8ES6ohU+8bjJ8P6ohU+8bjJ8K6ohU+8bjJ87:8oh0bjJ9ySZzdoh0bjroh0bjaoh0bjO
- TLSH T159272301BBC69A66D87F0635987AA3106775BC404B52C7AF27E07B3D1D327C05E623EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
d5b75afa907d0319cb882da437539b700ca446ace13407bd3c84f9f003bab411.exe
Resource
win10v2004-20260911-en
12 signatures
40 seconds
Behavioral task
behavioral2
Sample
d5b75afa907d0319cb882da437539b700ca446ace13407bd3c84f9f003bab411.exe
Resource
win11ltsc2024-20260911-en
12 signatures
40 seconds
Malware Config
Targets
-
- Target d5b75afa907d0319cb882da437539b700ca446ace13407bd3c84f9f003bab411.exe
- Size 19.8MB
- SHA256 d5b75afa907d0319cb882da437539b700ca446ace13407bd3c84f9f003bab411
- MD5 535fb7bcb44cbdf8be7ffd15f3cff9df
- SHA1 1dd5204b27d88e533ac69f77ff2d372229ebc528
- SHA512 084747ee75e9604b79149b269ba55064a906929614c78fd5c7643992702a90364ed1ccec2c88da7ded157eeff68f82f408a4c2f990b55961a124e3d8544c590d
- SSDEEP 393216:+i6ohU+8bjJ8gQq9ySZ8ES6ohU+8bjJ8P6ohU+8bjJ8K6ohU+8bjJ87:8oh0bjJ9ySZzdoh0bjroh0bjaoh0bjO
- TLSH T159272301BBC69A66D87F0635987AA3106775BC404B52C7AF27E07B3D1D327C05E623EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.