General
- Target blackdf7.rar
- Size 11.5MB
- Sample261030-w7tabafc63
- SHA256 4ee13e45a9022d28239f5d9798b6bb9b733d3ffc2aed5c05dfd03f401a02d1ea
- MD5 4a3e0202a6f8afda34a33db99f7426f1
- SHA1 40e0a78ef1cebfe15b214d94b5fe831c440a1d4f
- SHA512 fc00e6e8cb0973a925e6f71cdb4c7fb7ca191f896d514303ead24ad739c6a2e46c730539962b99870c33145757f472274c549b5f4fe51388b0148e44abedd0c7
- SSDEEP 196608:WeRScIwmdba01dFPxBJaoNMeVInyDz/9AZg+lQov6/b6eODKedz5BckXsM2kwxxf:WeLsaAQmMeVjj9og+lhv6IKkzHczaecs
- TLSH T168C633201D5A7A03D80FCA6C14F9AF277A7F5D09B65C1CB407A897B94BE07027BB528D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
blackdf7.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
blackdf7.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target blackdf7.exe
- Size 30.2MB
- SHA256 b6a4d8fbe8b25c2f2ed9b074794fdfb676d44e203cc241453a224444504ef42c
- MD5 2f064a1b8e8f69495ef08741a04b282b
- SHA1 7110a746a7916121305348954390127362356f49
- SHA512 ba0a6f3dfbbfdabca9cb62a4515d8577f4b702e1eda4e947662ff7f77108414b42c59e43503dfa34acbd93a2e16c9f8a04a30e7f5cd4fc6ea0b5f29996a5a8fe
- SSDEEP 196608:PiGHgs609KwX+rhQlobWZVMFRTkBnI/JpFM7kVzF40c15EbOqQxXuU:PiGS09ghWoKAaI/J47y4p1SlQ
- TLSH T17F67BF17A6E901E8D1BFD17C9717AA03FAB23449433556EB02A0469A2F677E0DE3F710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory