General
- Target 8467ce023d64249f8c3a8def759e6abbbbb99d676eb080b3edfb9835727dd47d
- Size 2.0MB
- Sample261006-pwffragx21
- SHA256 8467ce023d64249f8c3a8def759e6abbbbb99d676eb080b3edfb9835727dd47d
- MD5 e983a0b077927ba65137aa5bf14d6acd
- SHA1 367175b27c52c5fcb7215acc8283cf9ac2310f04
- SHA512 518735f0e78d0a0e56e235b9ebebbeda83cb423b2703e2ae18926d954024a0621515730b25944fec8f15f47243958cd8c41bd8cbbc32148f2bd1e30c8db2d898
- SSDEEP 49152:jZB1G8YhekEsF0N/Z9afexTVtseMKoT3oAyQiAQ:93G3ekP0YqUeMZ3obAQ
- TLSH T12695120AE7E409F8E0B7E53899569906F3B63C4E03619A9F13B552271F673E0CE3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8467ce023d64249f8c3a8def759e6abbbbb99d676eb080b3edfb9835727dd47d.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
8467ce023d64249f8c3a8def759e6abbbbb99d676eb080b3edfb9835727dd47d.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 8467ce023d64249f8c3a8def759e6abbbbb99d676eb080b3edfb9835727dd47d
- Size 2.0MB
- SHA256 8467ce023d64249f8c3a8def759e6abbbbb99d676eb080b3edfb9835727dd47d
- MD5 e983a0b077927ba65137aa5bf14d6acd
- SHA1 367175b27c52c5fcb7215acc8283cf9ac2310f04
- SHA512 518735f0e78d0a0e56e235b9ebebbeda83cb423b2703e2ae18926d954024a0621515730b25944fec8f15f47243958cd8c41bd8cbbc32148f2bd1e30c8db2d898
- SSDEEP 49152:jZB1G8YhekEsF0N/Z9afexTVtseMKoT3oAyQiAQ:93G3ekP0YqUeMZ3obAQ
- TLSH T12695120AE7E409F8E0B7E53899569906F3B63C4E03619A9F13B552271F673E0CE3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.