General
- Target WallpaperLocker.exe
- Size 111.0MB
- Sample261014-back3swxa1
- SHA256 d9c95e33e13819aa7e170d4deac95b01c2fd8a8d2653f1ffc6c13ccf5acd2c6c
- MD5 514e81c34dd7ffe402f5b176ef8fa1ed
- SHA1 ace4c1a661c9d836c91ec498272a3e44f13d565d
- SHA512 cbb537dcc3dcf445ceaf092280ce6343f42e9d768cbb26aac28520aaaf9f18b523e30955d851e69a981e2fb06a4627b2aefff4a83dcc2100bc44de7aafa876c5
- SSDEEP 786432:YIpq0a2o6oHhjx0EGnkvUOH06y52pxtfPGnlgC9X6KPu+DpwoP3X:YIw0A6oHNvgQXGlV9X6KPuOffX
- TLSH T142487C1163E86E45E23B8278977786A1D675BC525311C2CF0094FD4A3F73BC2BA363A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WallpaperLocker.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
WallpaperLocker.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target WallpaperLocker.exe
- Size 111.0MB
- SHA256 d9c95e33e13819aa7e170d4deac95b01c2fd8a8d2653f1ffc6c13ccf5acd2c6c
- MD5 514e81c34dd7ffe402f5b176ef8fa1ed
- SHA1 ace4c1a661c9d836c91ec498272a3e44f13d565d
- SHA512 cbb537dcc3dcf445ceaf092280ce6343f42e9d768cbb26aac28520aaaf9f18b523e30955d851e69a981e2fb06a4627b2aefff4a83dcc2100bc44de7aafa876c5
- SSDEEP 786432:YIpq0a2o6oHhjx0EGnkvUOH06y52pxtfPGnlgC9X6KPu+DpwoP3X:YIw0A6oHNvgQXGlV9X6KPuOffX
- TLSH T142487C1163E86E45E23B8278977786A1D675BC525311C2CF0094FD4A3F73BC2BA363A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Sets desktop wallpaper using registry