General
- Target e1b8d6a9ec2bea6c38d9ffd052a852a8bf0602ee5b05a176dc4a5f9a44765ee7
- Size 1.2MB
- Sample260511-l2ff6aew8y
- SHA256 e1b8d6a9ec2bea6c38d9ffd052a852a8bf0602ee5b05a176dc4a5f9a44765ee7
- MD5 c8ad941524cf0c6448e1df1ee3c0ac69
- SHA1 57c184af4259029366d5efc011ef6d9a66789f12
- SHA512 35835e211f243aeb5047c532ac3eabad91925aac9c917277f55d223a5b874610bce956e06f68c7aceed53fdc93939341efdd62bae15095171d194b1c9860bc11
- SSDEEP 24576:tqylFH50Dv6RwyeQvt6ot0h9HyrOLiruARv:gylFHUv6ReIt0jSrOe
- TLSH T19C557C02B64DC2B1C28C157136BF77366D349B5A1A35CA93B7E0CD6D2D32761AE2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e1b8d6a9ec2bea6c38d9ffd052a852a8bf0602ee5b05a176dc4a5f9a44765ee7.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target e1b8d6a9ec2bea6c38d9ffd052a852a8bf0602ee5b05a176dc4a5f9a44765ee7
- Size 1.2MB
- SHA256 e1b8d6a9ec2bea6c38d9ffd052a852a8bf0602ee5b05a176dc4a5f9a44765ee7
- MD5 c8ad941524cf0c6448e1df1ee3c0ac69
- SHA1 57c184af4259029366d5efc011ef6d9a66789f12
- SHA512 35835e211f243aeb5047c532ac3eabad91925aac9c917277f55d223a5b874610bce956e06f68c7aceed53fdc93939341efdd62bae15095171d194b1c9860bc11
- SSDEEP 24576:tqylFH50Dv6RwyeQvt6ot0h9HyrOLiruARv:gylFHUv6ReIt0jSrOe
- TLSH T19C557C02B64DC2B1C28C157136BF77366D349B5A1A35CA93B7E0CD6D2D32761AE2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE