General
- Target client.exe
- Size 2.2MB
- Sample260930-wwl2vstsft
- SHA256 1eb51e82267b2ea1d3216919dbac9d5297ca8565baf8e39ccfc07323136b1849
- MD5 d3cde4bd1869a3edbd6573557d6b1912
- SHA1 7a98e44d10312b5a4d419c21cb246b9f09385e22
- SHA512 ba5d1b6fb5ec03ac30c334f01798ff02b54450fe37eb94f37cf8feaceafb071d1e5e8ab7fa2ba5ae7cd080d5a66b3e0010a7ed7cdea3e0a5895a0116a59a66fc
- SSDEEP 24576:NyiMVtRC0iHgNW5nGTESie8JHvYK4ClI+0SnxuyETawg+tbcQAsqv:Ny1qgticK4ClfITX
- TLSH T13DB59E3662AC11C8F17BD17D8ADB4A47D6B274090331A6DB019446DD2F2BEEA0F7E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
client.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
client.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target client.exe
- Size 2.2MB
- SHA256 1eb51e82267b2ea1d3216919dbac9d5297ca8565baf8e39ccfc07323136b1849
- MD5 d3cde4bd1869a3edbd6573557d6b1912
- SHA1 7a98e44d10312b5a4d419c21cb246b9f09385e22
- SHA512 ba5d1b6fb5ec03ac30c334f01798ff02b54450fe37eb94f37cf8feaceafb071d1e5e8ab7fa2ba5ae7cd080d5a66b3e0010a7ed7cdea3e0a5895a0116a59a66fc
- SSDEEP 24576:NyiMVtRC0iHgNW5nGTESie8JHvYK4ClI+0SnxuyETawg+tbcQAsqv:Ny1qgticK4ClfITX
- TLSH T13DB59E3662AC11C8F17BD17D8ADB4A47D6B274090331A6DB019446DD2F2BEEA0F7E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.