General
- Target iTaxViewer-Pro.zip
- Size 2.5MB
- Sample261017-arpfjayz2p
- SHA256 db5bc2df726010e9de8de616858a0ceb2bc2d4fe7f07c2c5936a8cb8955fc57c
- MD5 97bf9992e4ddc1d2920a13cbb22458c5
- SHA1 decb70e78edab08c25aabf404e41c3c2f2da5bf0
- SHA512 0adf69d689f575c9b967163d352ecc2d5de5c455910eab50ffa77b68000c0f9dcd198112e6b71aa6cdcabe41c9fb6585e1484416fe5bccad0cd3f547fae95896
- SSDEEP 49152:cvCK6a4oC5cGRpeg5cpOxywWID5l65yFEfG3:cvBC5NHeg53xywWIly89
- TLSH T16BC5337902C30BD496C285004ED6FA669770B8786A94E49CB2B73BB71FDD70903A5D8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
iTaxViewer-Pro.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
iTaxViewer-Pro.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target iTaxViewer-Pro.exe
- Size 2.6MB
- SHA256 f5d2603fa53db87dc3b5a666a1e8603a3a8842198bf2858afac5f9d3419243c6
- MD5 121be0547957c4bc73b92f8069f6cbae
- SHA1 5a558fc0f245cda7812053c968c16cd892c636b7
- SHA512 ab22a9b9f7c74f0de454991ab33c92c9e28f7ce436da7d3ec1d670bd45d8091e0d5dcbfc59a28efc5cf08da0fa5eb170829654b04dd8e27f8a5efc78ec7eae55
- SSDEEP 49152:KKjI97msKKW0BWO7NmSBm9y5gwEihdVIHKL032G:ljI97i0B55mSB55gwEi70eW
- TLSH T124D5235263C3C6B1E5954830C8A6D4F09E227C78D9E0905B3DF9FF0F2AB9586447AA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies security service
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE