General
- Target CreativeEAX.exe
- Size 1.5MB
- Sample261101-3l17csdf29
- SHA256 c4467151c928d9e1448ac4821b34b9dd6395775cd23395a7428266e55a97b9df
- MD5 7d67db49e76a8884c2e6ea3a3450f253
- SHA1 767e7b35da79a6f2eb94ffd78eb33a8acd2d09d5
- SHA512 d319d1ee6e383ffab2712bb1827b5105dee4e3774515f031029be747252c05169342b9a4210e202d01657d178a5aa5741cba9f8878cd55a521f46a5dbd4e9b95
- SSDEEP 24576:PbSDBQEV+5sWmgQOiphp8b8u6ath+c3I/aDpJW8svmU:zS1QEV+5sWmgQoYbcRvf
- TLSH T160758E02A2A402ECD1BBD1798AA56D17E732380507B09AEF07D089691F777D15FBB723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CreativeEAX.exe
Resource
win10v2004-20260911-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
CreativeEAX.exe
Resource
win11ltsc2024-20260911-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target CreativeEAX.exe
- Size 1.5MB
- SHA256 c4467151c928d9e1448ac4821b34b9dd6395775cd23395a7428266e55a97b9df
- MD5 7d67db49e76a8884c2e6ea3a3450f253
- SHA1 767e7b35da79a6f2eb94ffd78eb33a8acd2d09d5
- SHA512 d319d1ee6e383ffab2712bb1827b5105dee4e3774515f031029be747252c05169342b9a4210e202d01657d178a5aa5741cba9f8878cd55a521f46a5dbd4e9b95
- SSDEEP 24576:PbSDBQEV+5sWmgQOiphp8b8u6ath+c3I/aDpJW8svmU:zS1QEV+5sWmgQoYbcRvf
- TLSH T160758E02A2A402ECD1BBD1798AA56D17E732380507B09AEF07D089691F777D15FBB723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.