General
- Target b2c4d66430808468c4d4ebc9a58cb63a99e4a6a62471fec82622ef02b2c5a9a0
- Size 1.6MB
- Sample260416-e3gbhsft7l
- SHA256 b2c4d66430808468c4d4ebc9a58cb63a99e4a6a62471fec82622ef02b2c5a9a0
- MD5 d5e671b11a0ef0d059d770f54410d5d9
- SHA1 86a6dd23c1c3a5c1c66879468ca6d41fe36a07d6
- SHA512 a27f8ec8e650bc4fa9e9181e3b8c79a9e2a3b494038a7966dd0f534a027010c999b1d724573b59c21f5de79710206937e6d793e80b2c503bb3836d4cf2c2697a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfT:AylFHUv6ReIt0jSrOA88gT
- TLSH T16E758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b2c4d66430808468c4d4ebc9a58cb63a99e4a6a62471fec82622ef02b2c5a9a0.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b2c4d66430808468c4d4ebc9a58cb63a99e4a6a62471fec82622ef02b2c5a9a0.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target b2c4d66430808468c4d4ebc9a58cb63a99e4a6a62471fec82622ef02b2c5a9a0
- Size 1.6MB
- SHA256 b2c4d66430808468c4d4ebc9a58cb63a99e4a6a62471fec82622ef02b2c5a9a0
- MD5 d5e671b11a0ef0d059d770f54410d5d9
- SHA1 86a6dd23c1c3a5c1c66879468ca6d41fe36a07d6
- SHA512 a27f8ec8e650bc4fa9e9181e3b8c79a9e2a3b494038a7966dd0f534a027010c999b1d724573b59c21f5de79710206937e6d793e80b2c503bb3836d4cf2c2697a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfT:AylFHUv6ReIt0jSrOA88gT
- TLSH T16E758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE