General
- Target 3891175fecc735fd9f2baf40bb93a37329bead049f3192f35d3c6d33c3fb8a10
- Size 4.9MB
- Sample261027-e5fg1aav7t
- SHA256 3891175fecc735fd9f2baf40bb93a37329bead049f3192f35d3c6d33c3fb8a10
- MD5 beffa702718d13f260deadf39fa4732f
- SHA1 e5fe0718470c11afe703db9c2a66a2cafdffc163
- SHA512 dab419b1d5fb6883edee3c078120c3c585c23e0fc6c0e2bbe14195f358ed030eade2b5f5b5664aafd77d7760b7ac78bd1dfa39daf492eb6e6691483488539d3a
- SSDEEP 98304:Mj6egzuZYQ4IPmilaRjU7QT3eIy4Zude1MwQvVcy0MO1If/:MjSSeilaBUWOm1MbvVcpMF/
- TLSH T1A23633028964B161DB46EDBF39238E5BF665C3431E6F45F856BE00A853CDC93804BF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
最新版.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
最新版.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 最新版.exe
- Size 8.1MB
- SHA256 cb5820004d0a8127b38796cc3dbf938f27b07035ee04f9db22d48144ca0ca7c3
- MD5 915d562bd7f47582ec0b50506c8f44c5
- SHA1 f48c5689adbc6cbf84a6bdf987161cdba2997650
- SHA512 5dd3d49049aff2e2064738cce4be2da1ceeb295efd5ae5f3f49fa310d5ff9dac0a140af4a623caee66c22d5b0fda42c79b03a137350c51281929344c7bf05b30
- SSDEEP 98304:20UDqm2TZ6bOh0WCB+T5doCXziCfGNiHRNIEoT0UDqmUTZ6b+w0WCB+T5doCXzif:lSGO6VcSAEowSEf6VcSAEo
- TLSH T1BC86E012BB81C073E59E0171517AA77B193EB6320735C4C7A3D42EA9AD306D2AB3D397
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.