General
- Target Veyro rebrands.exe
- Size 941KB
- Sample261012-ss397ats9j
- SHA256 66b0f818d4de663035f01df7678239b02fc94be8a51a7158ae198c573883e1ac
- MD5 3141cf03718b982df4cd721fda848c70
- SHA1 e19b81e9f10b69a1fd4883faf466baae6664a8eb
- SHA512 77f17310003b141df164b6b11d924ffe2e01f1ab0d6a652bbd2a4c52de32ca8577045ccf64aa41f45ce07e84df07211e8df8ca74fe50efed3fe798c74394f482
- SSDEEP 24576:mjGSxVZiYVsCV+zDWZ1mVPtDdbzSpxOPzVv7WI/2e9:YxxVZBWWA5dbzSpxOPzVv7WI/2
- TLSH T1BE259E5FA7A401F8C5BBD17CC6578617E6B27049032096DB07E0CAA52F13BE16B3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Veyro rebrands.exe
Resource
win10ltsc2021-20260911-en
17 signatures
120 seconds
Malware Config
Targets
-
- Target Veyro rebrands.exe
- Size 941KB
- SHA256 66b0f818d4de663035f01df7678239b02fc94be8a51a7158ae198c573883e1ac
- MD5 3141cf03718b982df4cd721fda848c70
- SHA1 e19b81e9f10b69a1fd4883faf466baae6664a8eb
- SHA512 77f17310003b141df164b6b11d924ffe2e01f1ab0d6a652bbd2a4c52de32ca8577045ccf64aa41f45ce07e84df07211e8df8ca74fe50efed3fe798c74394f482
- SSDEEP 24576:mjGSxVZiYVsCV+zDWZ1mVPtDdbzSpxOPzVv7WI/2e9:YxxVZBWWA5dbzSpxOPzVv7WI/2
- TLSH T1BE259E5FA7A401F8C5BBD17CC6578617E6B27049032096DB07E0CAA52F13BE16B3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.