General
- Target 54999f441a5bd10266c6fd5cf183b02132b8bdffa5a5a930223f8a39b3d7f6f6.zip
- Size 76KB
- Sample261014-ryznhset5x
- SHA256 a977ca2689fd959e030cee7acf665e149080e0d8ffa6a1d9a39a6746a7bd8a58
- MD5 7abe038d164d451242d0593b2864f525
- SHA1 8484b5ac29ed4224cb23b69627ca635e298f4f04
- SHA512 e0adb4d0db082c16db959be63c00e7bcf3517eceef42ac3504b9982bb7cd96437e8977b29356f38e058b8799536a992083a20165e28d6bfaac850316d980fabd
- SSDEEP 1536:A/FDgFnP3HiodOBq42xik/HI8zqozt0BIj/C272FyWG95RbvzATNF:Al3zoJxXHIkqoGBIj/78yWqTzATv
- TLSH T1F073022864728C2B85D01CFE7165E84ED52DA4E730DB763FC1B8C4A9C2DB392B989947
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
54999f441a5bd10266c6fd5cf183b02132b8bdffa5a5a930223f8a39b3d7f6f6.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
54999f441a5bd10266c6fd5cf183b02132b8bdffa5a5a930223f8a39b3d7f6f6.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 54999f441a5bd10266c6fd5cf183b02132b8bdffa5a5a930223f8a39b3d7f6f6
- Size 160KB
- SHA256 54999f441a5bd10266c6fd5cf183b02132b8bdffa5a5a930223f8a39b3d7f6f6
- MD5 33056b04e2ab3a9bb961a3ac0567f218
- SHA1 32293f368ef3a028bc497599e7ea919c1eb0ab55
- SHA512 ed02fd2b52cb9224605b6739dbc1e1e765c80fbfa0fc1fe99d7cad4eef35c963860359d26de3ed64845dceb086775d188428b3ca4a9273eab1256ff8ac300aca
- SSDEEP 3072:Unv33IoJfWoiORQx32PBHb4RP95k5EBHAupaIZT:UnP9fpisQx3oMfZ
- TLSH T1AAF34B17B76570FEE16B8535C9520905FB727C764BA0AADF07600AB70E236E09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Detect suspicious telegram bot
Detect suspicious telegram bot.