General
- Target iTaxViewer_Mini.exe
- Size 14.5MB
- Sample261017-arpfjayz2m
- SHA256 b58b29c21d9bf0de98f1494ab8098538b04e2ad3b7cc53476f2a4fe331604da3
- MD5 c500634cabf714000b2c3964dcc3c6a7
- SHA1 5106aa4845cfe87862b0d93eb1bef547cde5464c
- SHA512 1a27942002d70c6f0a477c6c279346ea8617edec5e37e6eb8082c2e8f58fd83491fb459f9f19638fb577724200d94ff427e9afd30721286959a8ea6886434f59
- SSDEEP 393216:79TG60yEwK1y+MUGZovlXJDrRteMBmkGj+JQ+6zoy6KjVdMK4tR:7Q60zyTZovlXJDrRQFk9r6z6SwR
- TLSH T194E63340EA83C1F0E422ADB0D55AC4B48E42AD3945F9251B2CB4FF4F7AB7456C2799B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
iTaxViewer_Mini.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
iTaxViewer_Mini.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target iTaxViewer_Mini.exe
- Size 14.5MB
- SHA256 b58b29c21d9bf0de98f1494ab8098538b04e2ad3b7cc53476f2a4fe331604da3
- MD5 c500634cabf714000b2c3964dcc3c6a7
- SHA1 5106aa4845cfe87862b0d93eb1bef547cde5464c
- SHA512 1a27942002d70c6f0a477c6c279346ea8617edec5e37e6eb8082c2e8f58fd83491fb459f9f19638fb577724200d94ff427e9afd30721286959a8ea6886434f59
- SSDEEP 393216:79TG60yEwK1y+MUGZovlXJDrRteMBmkGj+JQ+6zoy6KjVdMK4tR:7Q60zyTZovlXJDrRQFk9r6z6SwR
- TLSH T194E63340EA83C1F0E422ADB0D55AC4B48E42AD3945F9251B2CB4FF4F7AB7456C2799B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies security service
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE