General
- Target cb73dcdf14ffdeb84817aa2715e01551604ae12cdcfd954112b243dd7afaa195
- Size 129KB
- Sample260313-vjprjsd19x
- SHA256 cb73dcdf14ffdeb84817aa2715e01551604ae12cdcfd954112b243dd7afaa195
- MD5 e99e5cc5bb702f46e57267e479c54d42
- SHA1 f214f77b57ed4417a4a8167a9e95095c5dc70586
- SHA512 84f80e2b54b314a1d8cb46aaf0f218b1b2977a1b4b82ea990299b9627568efce30a87f28221ba7120d629a7c178d1fdafba495a3486254d34693fd45b00fbb41
- SSDEEP 3072:gdv6XZQpxl6OfIULDFQqMnq2H8SOGxvRQIR:IzbLTVa8SOgZQIR
- TLSH T1C1D319293AA69A00D13F777444B1A202B3F7CC576A17D53C9DE2B0E67A3F7824946EC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
cb73dcdf14ffdeb84817aa2715e01551604ae12cdcfd954112b243dd7afaa195.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target cb73dcdf14ffdeb84817aa2715e01551604ae12cdcfd954112b243dd7afaa195
- Size 129KB
- SHA256 cb73dcdf14ffdeb84817aa2715e01551604ae12cdcfd954112b243dd7afaa195
- MD5 e99e5cc5bb702f46e57267e479c54d42
- SHA1 f214f77b57ed4417a4a8167a9e95095c5dc70586
- SHA512 84f80e2b54b314a1d8cb46aaf0f218b1b2977a1b4b82ea990299b9627568efce30a87f28221ba7120d629a7c178d1fdafba495a3486254d34693fd45b00fbb41
- SSDEEP 3072:gdv6XZQpxl6OfIULDFQqMnq2H8SOGxvRQIR:IzbLTVa8SOgZQIR
- TLSH T1C1D319293AA69A00D13F777444B1A202B3F7CC576A17D53C9DE2B0E67A3F7824946EC1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.