General
- Target ManageEngine_RemoteCollector_64bit.exe
- Size 49.4MB
- Sample261015-pgmxaaat6l
- SHA256 f4aa856c868c5d6ede17924ceb8df9e81cf7246445aa255dc1bd142ef71af865
- MD5 7974ab13c69aa951121ee1014f8e1c8e
- SHA1 22110d55ad7e921f3d8b4a0fb78237cd1a0fae82
- SHA512 915e2049e12bf45e48cc4cb902f5fe10c4d99655b31de7ac70d47d909f3c81d7a4acc72e321e51e3a77996a6350f63a190f75e0d4306cd1658877f81c5bdaf1e
- SSDEEP 786432:E2BBsF7+BkDSU29AuAVi1WKn6eav8lNjYwea8mkqVHrN/KjA6kWRYv:z/0iMSUtuAE1WK6eaEj0rtmNNgA6hS
- TLSH T134B723237684802EE56A15315D6F9E60E2A86C335B2241D7F690FF591CF05D2BE33B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ManageEngine_RemoteCollector_64bit.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
ManageEngine_RemoteCollector_64bit.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target ManageEngine_RemoteCollector_64bit.exe
- Size 49.4MB
- SHA256 f4aa856c868c5d6ede17924ceb8df9e81cf7246445aa255dc1bd142ef71af865
- MD5 7974ab13c69aa951121ee1014f8e1c8e
- SHA1 22110d55ad7e921f3d8b4a0fb78237cd1a0fae82
- SHA512 915e2049e12bf45e48cc4cb902f5fe10c4d99655b31de7ac70d47d909f3c81d7a4acc72e321e51e3a77996a6350f63a190f75e0d4306cd1658877f81c5bdaf1e
- SSDEEP 786432:E2BBsF7+BkDSU29AuAVi1WKn6eav8lNjYwea8mkqVHrN/KjA6kWRYv:z/0iMSUtuAE1WK6eaEj0rtmNNgA6hS
- TLSH T134B723237684802EE56A15315D6F9E60E2A86C335B2241D7F690FF591CF05D2BE33B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies file permissions
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.