General
- Target 5b3475d787a0dfed631b1cd2b6266e9f1bf72d26bde5b9b3e3927ad618ccd979
- Size 685KB
- Sample260421-ls36vsfs3z
- SHA256 5b3475d787a0dfed631b1cd2b6266e9f1bf72d26bde5b9b3e3927ad618ccd979
- MD5 a2d6e26b00a04dfd1dfcf28ccc64afdc
- SHA1 0407e6bc5ff2da4b4e2e9ca382ff8f0703a7a41a
- SHA512 1a4ea3ade0f87bae1512c9e1bc4d9f36bbffad863d064fe79010a271ad99fe01a0f44abbdc656e09ec9ee89c26ce087339ccd667cdeda93d9f35f6c2dd96aa03
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJG:XLl7k/B2mGbUMoJnAhLrG
- TLSH T142E4D02D32AD1261E4AE9078E84BB251D67278351732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5b3475d787a0dfed631b1cd2b6266e9f1bf72d26bde5b9b3e3927ad618ccd979.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5b3475d787a0dfed631b1cd2b6266e9f1bf72d26bde5b9b3e3927ad618ccd979
- Size 685KB
- SHA256 5b3475d787a0dfed631b1cd2b6266e9f1bf72d26bde5b9b3e3927ad618ccd979
- MD5 a2d6e26b00a04dfd1dfcf28ccc64afdc
- SHA1 0407e6bc5ff2da4b4e2e9ca382ff8f0703a7a41a
- SHA512 1a4ea3ade0f87bae1512c9e1bc4d9f36bbffad863d064fe79010a271ad99fe01a0f44abbdc656e09ec9ee89c26ce087339ccd667cdeda93d9f35f6c2dd96aa03
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJG:XLl7k/B2mGbUMoJnAhLrG
- TLSH T142E4D02D32AD1261E4AE9078E84BB251D67278351732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE