General
- Target enderman.exe
- Size 269KB
- Sample261024-rex1ksvthz
- SHA256 7922d6b15c90eafe42491ce7743593485a80ec16d9ac476b05c13f9059892c7a
- MD5 d59fc2550b6e1a6dad0063665ba7fa5a
- SHA1 bb2f5480b46e759d97cc554010767b810fd8efb6
- SHA512 df9a2c12460e0cb24926e32dd146ebb596a62047c20179458a4fbc4fe8b883aedcf8b0fdcb45639a870cde4d445bf76752464f919f41b4affed2224951490af2
- SSDEEP 6144:Nw393dtLEzq58BcFN6Q8AnVybOc7V73N65ZjHU:Nw35dS4X8AnVyvLiU
- TLSH T13644D06176D2C032E92354309DBDA770FAB9B8352771954BBF800A2D6E319E2C726793
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
enderman.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target enderman.exe
- Size 269KB
- SHA256 7922d6b15c90eafe42491ce7743593485a80ec16d9ac476b05c13f9059892c7a
- MD5 d59fc2550b6e1a6dad0063665ba7fa5a
- SHA1 bb2f5480b46e759d97cc554010767b810fd8efb6
- SHA512 df9a2c12460e0cb24926e32dd146ebb596a62047c20179458a4fbc4fe8b883aedcf8b0fdcb45639a870cde4d445bf76752464f919f41b4affed2224951490af2
- SSDEEP 6144:Nw393dtLEzq58BcFN6Q8AnVybOc7V73N65ZjHU:Nw35dS4X8AnVyvLiU
- TLSH T13644D06176D2C032E92354309DBDA770FAB9B8352771954BBF800A2D6E319E2C726793
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops file in System32 directory