General
- Target 21d63c1213d28b1ad2c3614f0c7afe6bae887440770459ff0709d7b030c367f0
- Size 1.4MB
- Sample260420-kme2eaht8x
- SHA256 21d63c1213d28b1ad2c3614f0c7afe6bae887440770459ff0709d7b030c367f0
- MD5 dacfae31aa825409485c902348119b04
- SHA1 a468fab06cafbc01e13200ccabb1c0d829f7ff62
- SHA512 c7931cb9b6c9709041155ddfb8342055090e2f9d8f0e8d9216cdc0ce6a299ad04b7c5e4cb54cb510738ee18db78fda03e170452845d9a04e9b9c9c780c69a62c
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75m5:MLl7k/B2mGbUMoLnAhk
- TLSH T16965D02D32AD5260E4EE5078B84E7691E6717835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
21d63c1213d28b1ad2c3614f0c7afe6bae887440770459ff0709d7b030c367f0.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 21d63c1213d28b1ad2c3614f0c7afe6bae887440770459ff0709d7b030c367f0
- Size 1.4MB
- SHA256 21d63c1213d28b1ad2c3614f0c7afe6bae887440770459ff0709d7b030c367f0
- MD5 dacfae31aa825409485c902348119b04
- SHA1 a468fab06cafbc01e13200ccabb1c0d829f7ff62
- SHA512 c7931cb9b6c9709041155ddfb8342055090e2f9d8f0e8d9216cdc0ce6a299ad04b7c5e4cb54cb510738ee18db78fda03e170452845d9a04e9b9c9c780c69a62c
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75m5:MLl7k/B2mGbUMoLnAhk
- TLSH T16965D02D32AD5260E4EE5078B84E7691E6717835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE