General
- Target fa7aca51396cc99b36c472be6634c5cb2b538e2dea06a0d9e8c8b2568f718b7d
- Size 2.6MB
- Sample260426-ewgnpsez6j
- SHA256 fa7aca51396cc99b36c472be6634c5cb2b538e2dea06a0d9e8c8b2568f718b7d
- MD5 edccb6828e164ea60746b61ae7c3bf3d
- SHA1 37e39e607caf7cd92e86301f48d6508e79201acb
- SHA512 50002ae37397e612d2f0480074278d553d9ee38289adb92ee2067b00593cd3729c359e9060de34d59f6d18dbee8a0dc30530207593c726a6348b724a3130cfff
- SSDEEP 49152:+EE0/W8OdrJwqXl9+OGPeXGGmJ7kgkqjRt:yrJwSv89hkgkqjT
- TLSH T11DC58B21A508537EEC061170603A9F356E253F11B7524DFF9BA87EA63BB31E1193B31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fa7aca51396cc99b36c472be6634c5cb2b538e2dea06a0d9e8c8b2568f718b7d.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target fa7aca51396cc99b36c472be6634c5cb2b538e2dea06a0d9e8c8b2568f718b7d
- Size 2.6MB
- SHA256 fa7aca51396cc99b36c472be6634c5cb2b538e2dea06a0d9e8c8b2568f718b7d
- MD5 edccb6828e164ea60746b61ae7c3bf3d
- SHA1 37e39e607caf7cd92e86301f48d6508e79201acb
- SHA512 50002ae37397e612d2f0480074278d553d9ee38289adb92ee2067b00593cd3729c359e9060de34d59f6d18dbee8a0dc30530207593c726a6348b724a3130cfff
- SSDEEP 49152:+EE0/W8OdrJwqXl9+OGPeXGGmJ7kgkqjRt:yrJwSv89hkgkqjT
- TLSH T11DC58B21A508537EEC061170603A9F356E253F11B7524DFF9BA87EA63BB31E1193B31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.