General
- Target 5205cb7377727de1ec3dfe2a4d540b8968e91ae4ef5f2de82f5488bd22db205f
- Size 491KB
- Sample260421-m98cksdt4n
- SHA256 5205cb7377727de1ec3dfe2a4d540b8968e91ae4ef5f2de82f5488bd22db205f
- MD5 b2c48ce8a7436a93ac0cb5735cb955a1
- SHA1 487daaafb0b16333a9e520d6ce10e12bc0c80297
- SHA512 675cf34fb2c97d174a6be1e0dbb9141e2252c069c757a40b9b8214a7160d733cfe6477d9e7d547ffb6e5e3a01739c845de054b1702b47384c3cbd59edb9f7f4a
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpi:QptHFyrsy7t+TSQDsy777vxCRbapi
- TLSH T13EB41229776CCB2AC0CD1D32B51EFEF86A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5205cb7377727de1ec3dfe2a4d540b8968e91ae4ef5f2de82f5488bd22db205f.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5205cb7377727de1ec3dfe2a4d540b8968e91ae4ef5f2de82f5488bd22db205f
- Size 491KB
- SHA256 5205cb7377727de1ec3dfe2a4d540b8968e91ae4ef5f2de82f5488bd22db205f
- MD5 b2c48ce8a7436a93ac0cb5735cb955a1
- SHA1 487daaafb0b16333a9e520d6ce10e12bc0c80297
- SHA512 675cf34fb2c97d174a6be1e0dbb9141e2252c069c757a40b9b8214a7160d733cfe6477d9e7d547ffb6e5e3a01739c845de054b1702b47384c3cbd59edb9f7f4a
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpi:QptHFyrsy7t+TSQDsy777vxCRbapi
- TLSH T13EB41229776CCB2AC0CD1D32B51EFEF86A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE