General
- Target file.exe
- Size 1.3MB
- Sample261013-3khcvsdg28
- SHA256 ac04d6f242b026ee7be404dd99a0d09564b1c74eb7e453401dc2c15b680bad05
- MD5 261c8f16e809fdcf42b97bacee9e523f
- SHA1 ca99deaba23c339bdc816e5ea3977849fa437f2a
- SHA512 d96b33dc666ac8365de0d903f3a08b21173a5a74c25c73e9705ff58f617d692404f6492d9b766fa85b33b5b22c8466f6e6ecd2b873cdfac0d82f39cd8fa8429d
- SSDEEP 24576:f8BWYGVh9vHksLmy+FZ3tLOvEWXGT2z1MEunuYG/P7j+:f8B9GVosLf+F362TGMEu4/P7y
- TLSH T13D555A23A7941DFAF467C178C9624122E672F83D07E066DB3A9C6A551F337D12AFA301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 1.3MB
- SHA256 ac04d6f242b026ee7be404dd99a0d09564b1c74eb7e453401dc2c15b680bad05
- MD5 261c8f16e809fdcf42b97bacee9e523f
- SHA1 ca99deaba23c339bdc816e5ea3977849fa437f2a
- SHA512 d96b33dc666ac8365de0d903f3a08b21173a5a74c25c73e9705ff58f617d692404f6492d9b766fa85b33b5b22c8466f6e6ecd2b873cdfac0d82f39cd8fa8429d
- SSDEEP 24576:f8BWYGVh9vHksLmy+FZ3tLOvEWXGT2z1MEunuYG/P7j+:f8B9GVosLf+F362TGMEu4/P7y
- TLSH T13D555A23A7941DFAF467C178C9624122E672F83D07E066DB3A9C6A551F337D12AFA301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application