General
- Target 5f9e6c4b477431ab9c79ab5ab65021bbe2d817e0a02fbef4c2f53d650733fc5b
- Size 1.9MB
- Sample260416-jec2eadw3x
- SHA256 5f9e6c4b477431ab9c79ab5ab65021bbe2d817e0a02fbef4c2f53d650733fc5b
- MD5 7828c2f5545d851901bfed58b761e4e8
- SHA1 d938d896b804752be76c0f160d33c80431432180
- SHA512 5ca528b8fe6183493b3c64f2192460e3bc576c9be2f846fb18988e45615d58a94e9a06fd094173fb4006dd84d000c8ad14f87ff2454905b035c7326cf45a3702
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuB:WylFHUv6ReIt0jSrOW88XB
- TLSH T172957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5f9e6c4b477431ab9c79ab5ab65021bbe2d817e0a02fbef4c2f53d650733fc5b.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5f9e6c4b477431ab9c79ab5ab65021bbe2d817e0a02fbef4c2f53d650733fc5b
- Size 1.9MB
- SHA256 5f9e6c4b477431ab9c79ab5ab65021bbe2d817e0a02fbef4c2f53d650733fc5b
- MD5 7828c2f5545d851901bfed58b761e4e8
- SHA1 d938d896b804752be76c0f160d33c80431432180
- SHA512 5ca528b8fe6183493b3c64f2192460e3bc576c9be2f846fb18988e45615d58a94e9a06fd094173fb4006dd84d000c8ad14f87ff2454905b035c7326cf45a3702
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuB:WylFHUv6ReIt0jSrOW88XB
- TLSH T172957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE