General
- Target a27b9e5e58c61d9658f7da2a4e88b2ff2b5e4748c5ee57151ee6247a8dee274c
- Size 2.1MB
- Sample261014-d41wwae13s
- SHA256 a27b9e5e58c61d9658f7da2a4e88b2ff2b5e4748c5ee57151ee6247a8dee274c
- MD5 f367989aafed928a74ca2b05b3ab3a8c
- SHA1 da7a9459d0efafcd1b69f119e9fc798b4aebb2d6
- SHA512 c3de0c41f7eb25da01f5bafbd01bfb5014df70c6a2af1774ffc40df0740ce9a0e696683bf00606e53a45c2b19c59fff8f4b8e105438e0bb9201502b9d0a99d7f
- SSDEEP 49152:jZB1G8YnekEsAyNHQQNbITDE1QgH7lCBRgdjX:93Ghekm0HQhtc7U8dj
- TLSH T1A8A51209E7E409F8D0B7E1389E528906E7BA3C4E03719A9F17B5522B1F673E0DE29711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a27b9e5e58c61d9658f7da2a4e88b2ff2b5e4748c5ee57151ee6247a8dee274c.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
a27b9e5e58c61d9658f7da2a4e88b2ff2b5e4748c5ee57151ee6247a8dee274c.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target a27b9e5e58c61d9658f7da2a4e88b2ff2b5e4748c5ee57151ee6247a8dee274c
- Size 2.1MB
- SHA256 a27b9e5e58c61d9658f7da2a4e88b2ff2b5e4748c5ee57151ee6247a8dee274c
- MD5 f367989aafed928a74ca2b05b3ab3a8c
- SHA1 da7a9459d0efafcd1b69f119e9fc798b4aebb2d6
- SHA512 c3de0c41f7eb25da01f5bafbd01bfb5014df70c6a2af1774ffc40df0740ce9a0e696683bf00606e53a45c2b19c59fff8f4b8e105438e0bb9201502b9d0a99d7f
- SSDEEP 49152:jZB1G8YnekEsAyNHQQNbITDE1QgH7lCBRgdjX:93Ghekm0HQhtc7U8dj
- TLSH T1A8A51209E7E409F8D0B7E1389E528906E7BA3C4E03719A9F17B5522B1F673E0DE29711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.