General
- Target 11102026_0154_04102026_20262743130870.1E9CFF.vhd.zip
- Size 3.0MB
- Sample261011-cble2styb1
- SHA256 9576956612a9cc8d9338e7afcad59adee4fb8d74cba6dc63281438c7c2ebdc81
- MD5 8f6a09c66630fc0ea4a7171e4bb8ac22
- SHA1 18826bb69877cc9d136ff493372b2f43d209a891
- SHA512 246dbc58b2871df47fca42c2e3dd754ebe69b909cb884313bd15fea195bddf15b3fd01da5e0a2c5c5affb00bd9606d9e3a6d60f3b85dfb888a9901c598f1ee8d
- SSDEEP 98304:0/b9gtHaO2xaK98khrNnXcdGxf+HyRcc2RbbyRbqr:0hRO275ZmSRcc29bb
- TLSH T107E5332020E43661F7CA81B149950402DD4D6168BADEE2DCCBA3F6E4F12F6DF9B5F1A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Z#2743130870.exe
Resource
win10v2004-20260911-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
Z#2743130870.exe
Resource
win11ltsc2024-20260911-en
10 signatures
300 seconds
Behavioral task
behavioral3
Sample
certpick.dll
Resource
win10v2004-20260911-en
4 signatures
300 seconds
Behavioral task
behavioral4
Sample
rimE.dll
Resource
win10v2004-20260911-en
2 signatures
300 seconds
Behavioral task
behavioral5
Sample
rimE.dll
Resource
win11ltsc2024-20260911-en
2 signatures
300 seconds
Malware Config
Targets
-
- Target Z#2743130870.exe
- Size 1.9MB
- SHA256 c74f55247aa2c72001024bd977c869cb5adce6f8604a4d32329f015b73ae2a49
- MD5 711cd47d4524145f9c488afecc85ebc7
- SHA1 2f9e5368c039db49018ec41bbb20a3b085788b24
- SHA512 8bf03abb818d6d11f210e17a7e8c8f3c941774390cf0c5e679cb18331089341d43486cdc7af1203b29eac476f2f802f789f17ec6926d17fdd099d13172a79a15
- SSDEEP 24576:DitHbptR5UngkbfXXqO7jiugTdtHxVAuN9AGFwzojqnIXxXi2+QV8epwMGqtc:WtR5UngkzvyPtHxWzojqnIXtl+NeBGqq
- TLSH T105953A203942C13EEA9113718D78EAFA565DAD102F35D1CF63987A6A3B78DC31933627
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target certpick.dll
- Size 19KB
- SHA256 e07c0ba8aca6c24ce4a4c467173325dbbfa978cb5c0a43a87ce4636b202c416e
- MD5 edae75fd9467698023d931f9805faca2
- SHA1 03f5bf9c22b9baeda5477043c2bfa5f2cbb6f773
- SHA512 cb6c295e6dc27f59002749f577e75de6dc92338b4b5b0b3ef5f33a4506c8890fc295e24b1b22c854979addf8c3673f6b02e0462cf458d3fa810e2eaf9a831bb5
- SSDEEP 384:CBb1/v4ESqu42iOCEc+ICGhjYvdf+mdw+pbhramoWsXWi:CH4ESqu42i4c+DfBnmx
- TLSH T184922A40A59499F6EBEE19F8256E773E0A7EE6200F9045D7434342CE3E219C2EB36356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rimE.DLL
- Size 3.4MB
- SHA256 4c939547cdfa87e7d732c55ade2cf98e9eedd7559d18a65c150c2f6e3685aa58
- MD5 960846b9ea93b14bde8cdcfcb492140b
- SHA1 941f455e95eca78ec56fc09815dc8db919e18a5f
- SHA512 14a6fd284794961dd93443d473677aad1db4c9a080806c962cda5dec8165fbf74633a8ed736a80e5eaca001215097c3f3b7016a70f12ae7072355ed649a77f56
- SSDEEP 98304:CWCPEp3NBOMoNxY9J4SwEi8qmlNOZxOs3gz5da2aUydgHG:O5QCv8qmlNOPtgzzcG
- TLSH T1A3F5E12379D4807AC26F02704E6F776D72FDA5704D3545AB36C86E2C6DB08A2763C6A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10