General
- Target e6d9147a0b9213fd6dc126e7846fc017615e3a093d4840e7df133d195c04eb71
- Size 1.6MB
- Sample261011-p1zeesaa33
- SHA256 e6d9147a0b9213fd6dc126e7846fc017615e3a093d4840e7df133d195c04eb71
- MD5 49622a76388cc4aaa68d07ad9b7a08a5
- SHA1 ad6b0c3f84b88f03dab4c55ce6f8a2db4caa4fdd
- SHA512 2cb75c813a1d2915c143079c5b839d9b828d0c4913f4049fd4809148f5fb7ac22a8fbd19465bfe6dc49b8fc48c5ca1a188c7fec52e82935b7c4db41abf774a62
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfK:AylFHUv6ReIt0jSrOA88gK
- TLSH T19D757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e6d9147a0b9213fd6dc126e7846fc017615e3a093d4840e7df133d195c04eb71.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
e6d9147a0b9213fd6dc126e7846fc017615e3a093d4840e7df133d195c04eb71.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target e6d9147a0b9213fd6dc126e7846fc017615e3a093d4840e7df133d195c04eb71
- Size 1.6MB
- SHA256 e6d9147a0b9213fd6dc126e7846fc017615e3a093d4840e7df133d195c04eb71
- MD5 49622a76388cc4aaa68d07ad9b7a08a5
- SHA1 ad6b0c3f84b88f03dab4c55ce6f8a2db4caa4fdd
- SHA512 2cb75c813a1d2915c143079c5b839d9b828d0c4913f4049fd4809148f5fb7ac22a8fbd19465bfe6dc49b8fc48c5ca1a188c7fec52e82935b7c4db41abf774a62
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfK:AylFHUv6ReIt0jSrOA88gK
- TLSH T19D757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE