General
- Target c13b24a73d36d6755d36ed636c9b6d6aec843b9c23e5b10af06973169c74f34b
- Size 643KB
- Sample260418-eksltsgs2s
- SHA256 c13b24a73d36d6755d36ed636c9b6d6aec843b9c23e5b10af06973169c74f34b
- MD5 de2264420feffe045a08d8434a5cf64d
- SHA1 38a1da23e1cf6796ff9a0dcf6096dd634435d709
- SHA512 ba532d275e8037feacfafccd1d70b94f29b1069b79f3d77587bfd75d843d962ebdc8bc53eae2880635ac8891e6ca2748a9ceca921f2ba0a139029617b7cbdbc2
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj3:QptHFyrsy7t+TSQDsy777vxCRbapnnAZ
- TLSH T131E4DE193EAE02A4D49D4474AD0AB3558A717C6133378EFB35A3F578CA32ED87D39A40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c13b24a73d36d6755d36ed636c9b6d6aec843b9c23e5b10af06973169c74f34b.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target c13b24a73d36d6755d36ed636c9b6d6aec843b9c23e5b10af06973169c74f34b
- Size 643KB
- SHA256 c13b24a73d36d6755d36ed636c9b6d6aec843b9c23e5b10af06973169c74f34b
- MD5 de2264420feffe045a08d8434a5cf64d
- SHA1 38a1da23e1cf6796ff9a0dcf6096dd634435d709
- SHA512 ba532d275e8037feacfafccd1d70b94f29b1069b79f3d77587bfd75d843d962ebdc8bc53eae2880635ac8891e6ca2748a9ceca921f2ba0a139029617b7cbdbc2
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj3:QptHFyrsy7t+TSQDsy777vxCRbapnnAZ
- TLSH T131E4DE193EAE02A4D49D4474AD0AB3558A717C6133378EFB35A3F578CA32ED87D39A40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE