General
- Target daa5ea79665836a1d4dc95f2ec0f48860dcb91dccc9028d45dfdc4add4359e49
- Size 1.6MB
- Sample261017-najevasthw
- SHA256 daa5ea79665836a1d4dc95f2ec0f48860dcb91dccc9028d45dfdc4add4359e49
- MD5 c2c8bc59dd8695904f7418dd6d8a4e06
- SHA1 25d44e77e88aa4481f6aec5b69095442dc44f0a0
- SHA512 7c314dae548b359952745716b3d36ac9b428a3c02615d1dfdea9214a5c2d82677ab69aab06a61dc3ad0db400fed7301b8afccd447cd07b1c4a2caf8a5f5cc54a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfs:AylFHUv6ReIt0jSrOA88gs
- TLSH T1A0757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
daa5ea79665836a1d4dc95f2ec0f48860dcb91dccc9028d45dfdc4add4359e49.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
daa5ea79665836a1d4dc95f2ec0f48860dcb91dccc9028d45dfdc4add4359e49.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target daa5ea79665836a1d4dc95f2ec0f48860dcb91dccc9028d45dfdc4add4359e49
- Size 1.6MB
- SHA256 daa5ea79665836a1d4dc95f2ec0f48860dcb91dccc9028d45dfdc4add4359e49
- MD5 c2c8bc59dd8695904f7418dd6d8a4e06
- SHA1 25d44e77e88aa4481f6aec5b69095442dc44f0a0
- SHA512 7c314dae548b359952745716b3d36ac9b428a3c02615d1dfdea9214a5c2d82677ab69aab06a61dc3ad0db400fed7301b8afccd447cd07b1c4a2caf8a5f5cc54a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfs:AylFHUv6ReIt0jSrOA88gs
- TLSH T1A0757C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE