General
- Target 4c99a90d35de0913ffc1a5e7a3fe5562433718a6bc599292ac2cadb54091a905
- Size 13.1MB
- Sample261027-hcexjsa121
- SHA256 4c99a90d35de0913ffc1a5e7a3fe5562433718a6bc599292ac2cadb54091a905
- MD5 4e6ff86c629481f899d4aeea63e7a076
- SHA1 df85a732193b75ac1a68abe4343f518e16be30a8
- SHA512 c83fa0c4e4b3f0b4cf01bd5f5303e6e3034495f8bb3f96640746b77a8a5ba136c87fb5deaed798004ba6573459f2a8f17db4500731d396f9fb9dbf2dbcdcc4fe
- SSDEEP 393216:B+loyC6mww69VPJ8pMQ4GSziyvbfPrvZB:ByCaL78pMXGSzHP
- TLSH T10FD633D2B16120B7DA72F1751BF8AA719D9963218777CB8373CC8E0A45A18C1D52A3F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4c99a90d35de0913ffc1a5e7a3fe5562433718a6bc599292ac2cadb54091a905.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
4c99a90d35de0913ffc1a5e7a3fe5562433718a6bc599292ac2cadb54091a905.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4c99a90d35de0913ffc1a5e7a3fe5562433718a6bc599292ac2cadb54091a905
- Size 13.1MB
- SHA256 4c99a90d35de0913ffc1a5e7a3fe5562433718a6bc599292ac2cadb54091a905
- MD5 4e6ff86c629481f899d4aeea63e7a076
- SHA1 df85a732193b75ac1a68abe4343f518e16be30a8
- SHA512 c83fa0c4e4b3f0b4cf01bd5f5303e6e3034495f8bb3f96640746b77a8a5ba136c87fb5deaed798004ba6573459f2a8f17db4500731d396f9fb9dbf2dbcdcc4fe
- SSDEEP 393216:B+loyC6mww69VPJ8pMQ4GSziyvbfPrvZB:ByCaL78pMXGSzHP
- TLSH T10FD633D2B16120B7DA72F1751BF8AA719D9963218777CB8373CC8E0A45A18C1D52A3F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger