General
- Target loader.exe
- Size 10.5MB
- Sample261003-ss86fatsds
- SHA256 b8c91d6c70ac6045598ed631b2afde348cf96af0b6a015bb6191947b4d782798
- MD5 e96a374fa3f8581bbe4a3fd6df4699ff
- SHA1 eb6ced6d4444cafa1b65186662616694e320edbc
- SHA512 fab600580a8b18807bfd126ce11549095daf5384a34c3f4ce5a35879843c137becbcb237098ef33f5a7b45112a20132b622400b7aeda70ac7702628d6a12a418
- SSDEEP 98304:9PasP1GAaybBDSeTpC/nxs200wjFMvCE:9Ld9Q+2DWCvP
- TLSH T129B64947ECA555E4C0ADC17ACA669557BB713C894B2063D32BA0F7242F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 10.5MB
- SHA256 b8c91d6c70ac6045598ed631b2afde348cf96af0b6a015bb6191947b4d782798
- MD5 e96a374fa3f8581bbe4a3fd6df4699ff
- SHA1 eb6ced6d4444cafa1b65186662616694e320edbc
- SHA512 fab600580a8b18807bfd126ce11549095daf5384a34c3f4ce5a35879843c137becbcb237098ef33f5a7b45112a20132b622400b7aeda70ac7702628d6a12a418
- SSDEEP 98304:9PasP1GAaybBDSeTpC/nxs200wjFMvCE:9Ld9Q+2DWCvP
- TLSH T129B64947ECA555E4C0ADC17ACA669557BB713C894B2063D32BA0F7242F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1