General
- Target b70251d88d1c771677beee862911d19afb3eefae5e3585893764549874d3076e
- Size 492KB
- Sample260428-rnfgwset8k
- SHA256 b70251d88d1c771677beee862911d19afb3eefae5e3585893764549874d3076e
- MD5 499a76bf1d9f5845f42a6ed08c6b19c0
- SHA1 6fdc4f6a9c3390e2ebcb241d84738b08335a9e2a
- SHA512 8159ce76713d5df6e2b811a568749c0e6a20584bd0c29363a9ae0ee90e7a5430a0acda4f87095a80a6a5cc2eb4350af51e2bd91dd28495861997beeb254cec21
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpc:QptHFyrsy7t+TSQDsy777vxCRbapc
- TLSH T1A4B41229776CCB26C0CD1D32B51EFEFC6A288D558B79C5673AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b70251d88d1c771677beee862911d19afb3eefae5e3585893764549874d3076e.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b70251d88d1c771677beee862911d19afb3eefae5e3585893764549874d3076e
- Size 492KB
- SHA256 b70251d88d1c771677beee862911d19afb3eefae5e3585893764549874d3076e
- MD5 499a76bf1d9f5845f42a6ed08c6b19c0
- SHA1 6fdc4f6a9c3390e2ebcb241d84738b08335a9e2a
- SHA512 8159ce76713d5df6e2b811a568749c0e6a20584bd0c29363a9ae0ee90e7a5430a0acda4f87095a80a6a5cc2eb4350af51e2bd91dd28495861997beeb254cec21
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpc:QptHFyrsy7t+TSQDsy777vxCRbapc
- TLSH T1A4B41229776CCB26C0CD1D32B51EFEFC6A288D558B79C5673AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE