General
- Target dbafe67a9860c04618a0cbb0a92180bdf189145857e6c70f39f1e5b1f0c824f8
- Size 706KB
- Sample260423-e89v1saz4w
- SHA256 dbafe67a9860c04618a0cbb0a92180bdf189145857e6c70f39f1e5b1f0c824f8
- MD5 dd3ee50ae04f27a20c0e603a907bcd03
- SHA1 1336d8a9f49d7df523ee9bd7011f0f04b48498fe
- SHA512 173a243db7d0a0ed36d997dd511bafc01338a5068c3d86f978598ba1975ae90736de4048cffa2a1328f9293b4eaa0ef407b4f396061784cebbf02bccd8275f0f
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/751t:QptHFyrsy7t+TSQDsy777vxCRbapnnAn
- TLSH T164F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dbafe67a9860c04618a0cbb0a92180bdf189145857e6c70f39f1e5b1f0c824f8.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target dbafe67a9860c04618a0cbb0a92180bdf189145857e6c70f39f1e5b1f0c824f8
- Size 706KB
- SHA256 dbafe67a9860c04618a0cbb0a92180bdf189145857e6c70f39f1e5b1f0c824f8
- MD5 dd3ee50ae04f27a20c0e603a907bcd03
- SHA1 1336d8a9f49d7df523ee9bd7011f0f04b48498fe
- SHA512 173a243db7d0a0ed36d997dd511bafc01338a5068c3d86f978598ba1975ae90736de4048cffa2a1328f9293b4eaa0ef407b4f396061784cebbf02bccd8275f0f
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/751t:QptHFyrsy7t+TSQDsy777vxCRbapnnAn
- TLSH T164F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE