General
- Target 0c2ba00b4160eca257eb38505efedc5a70eece667d877bba0f246e4dcf1bab88
- Size 1.2MB
- Sample260429-nt53ysa161
- SHA256 0c2ba00b4160eca257eb38505efedc5a70eece667d877bba0f246e4dcf1bab88
- MD5 a670d57acf6a17b2bb75c87776b1bfbb
- SHA1 0abcc6c85268d83f5a35ed3535bcc2051a21fea2
- SHA512 2e94e87cbf7740be3ded6fe40c5b260142dcea4c49a3ec313b9ece450045f83faf61575b4fa8a8ca9efa563ad05488b9118da91c9c2a4c852c8a33020cc695d5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAh8:AylFHUv6ReIt0jSrOo
- TLSH T1FF457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0c2ba00b4160eca257eb38505efedc5a70eece667d877bba0f246e4dcf1bab88.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
0c2ba00b4160eca257eb38505efedc5a70eece667d877bba0f246e4dcf1bab88.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0c2ba00b4160eca257eb38505efedc5a70eece667d877bba0f246e4dcf1bab88
- Size 1.2MB
- SHA256 0c2ba00b4160eca257eb38505efedc5a70eece667d877bba0f246e4dcf1bab88
- MD5 a670d57acf6a17b2bb75c87776b1bfbb
- SHA1 0abcc6c85268d83f5a35ed3535bcc2051a21fea2
- SHA512 2e94e87cbf7740be3ded6fe40c5b260142dcea4c49a3ec313b9ece450045f83faf61575b4fa8a8ca9efa563ad05488b9118da91c9c2a4c852c8a33020cc695d5
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAh8:AylFHUv6ReIt0jSrOo
- TLSH T1FF457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE