General
- Target 7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c
- Size 1.0MB
- Sample261113-n8evbabs8k
- SHA256 7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c
- MD5 9ef5032a13be691a224c7092913e09be
- SHA1 d5c889dd6a6ab7f21f88bf6f9a94b2638eb434b4
- SHA512 0925f60d124ee77cc94a9bf00bab373bd22b8862624d6ac0bf0e6ead126c513cee0a03a21dc13a1b252a0d1f5632ea5cac3dab62f581584c1e31235004ec902a
- SSDEEP 24576:AMRs4avyOaiJ1vJxn+sOhEHyD3KEQgVIGaMa6TvxtZNbUTkuu8LsYM:hs4IyOai1hx+AyDaEQgVxlFmnsYM
- TLSH T1E1353344792275434D9B35FDAE11E53011CDEDC4E12D64EE83C9318F26A27AF48BFA2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
23.248.226.130_资源_加强清理_460.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
23.248.226.130_资源_加强清理_460.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 23.248.226.130_资源_加强清理_460.exe
- Size 3.0MB
- SHA256 6c2909ecee93844641bab825675d6fef81abc8e9b697853884bfffa66163872f
- MD5 7fe131452696652ad7ecee45c02e188b
- SHA1 a34c5dad0118b9888832eb09cded0c33fa9d8119
- SHA512 358a0eaf2969e45b47bad3d9245033a3648f43bdcfc642ee3395f7476bd2235ea0c60001eebf85bba8bce0ba10a3bec4a11ca9ae217c82a80482586fa86067bd
- SSDEEP 49152:WhPYI0cUOIbUNEWWDKgFXpe8JTnE2g2PFDjst:WdZ0cUOIANEWWDKgFXpe8htg2PFDW
- TLSH T110E55CDB2077069EF0A9C93458F0167BDD7BCD629F40C82312B39EB9BD123A09E5E855
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext