General
- Target 4379c34043839f35f56854948010eddd7d64e463b4b5ae12fadb58d4088896d4
- Size 841KB
- Sample260423-e6wklsay6y
- SHA256 4379c34043839f35f56854948010eddd7d64e463b4b5ae12fadb58d4088896d4
- MD5 3f5e9a65759d552d700c256d3af45f90
- SHA1 2c054cf6153bfd5870bc42227028b74e0892f6f3
- SHA512 f59e52fc3922812c88f5c8e937c96f6169d8637801baf7d020215eff3b96fce129d80e0aa0d5efc11962eef591ec29a7440f31aadb53cfba16be37207c4fe417
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iox:XLl7k/B2mGbUMoJnAhLrnAhUQQO
- TLSH T16105C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4379c34043839f35f56854948010eddd7d64e463b4b5ae12fadb58d4088896d4.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4379c34043839f35f56854948010eddd7d64e463b4b5ae12fadb58d4088896d4
- Size 841KB
- SHA256 4379c34043839f35f56854948010eddd7d64e463b4b5ae12fadb58d4088896d4
- MD5 3f5e9a65759d552d700c256d3af45f90
- SHA1 2c054cf6153bfd5870bc42227028b74e0892f6f3
- SHA512 f59e52fc3922812c88f5c8e937c96f6169d8637801baf7d020215eff3b96fce129d80e0aa0d5efc11962eef591ec29a7440f31aadb53cfba16be37207c4fe417
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iox:XLl7k/B2mGbUMoJnAhLrnAhUQQO
- TLSH T16105C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE