General
- Target e4defd8a187a513212cb19c9f2a800505395e66d9cd9eb3a96c291060224e7dd
- Size 308KB
- Sample260515-qh8e2sdz2k
- SHA256 e4defd8a187a513212cb19c9f2a800505395e66d9cd9eb3a96c291060224e7dd
- MD5 2b99e5c85cd8b0e6decf30d6daee094e
- SHA1 c3e7652e16a2e03d96b0274b5520d19b96196a03
- SHA512 040140638f08089e632f3dcde2705b86be8909b357aecf2bcdc7df358d50f6d886227ae18c55441761027425b647f5cef9bb73294650a626adf5fee3b7498a0f
- SSDEEP 6144:9mEdSunAqHdroKcykhPBbiMV5xzr2fXGzN:94ujKyUp+gOg
- TLSH T16464D0A7A354C5A2E75986B0A813CCB92D283E35D941762BA3C4BF5F3C7035A345932F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e4defd8a187a513212cb19c9f2a800505395e66d9cd9eb3a96c291060224e7dd.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
e4defd8a187a513212cb19c9f2a800505395e66d9cd9eb3a96c291060224e7dd.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target e4defd8a187a513212cb19c9f2a800505395e66d9cd9eb3a96c291060224e7dd
- Size 308KB
- SHA256 e4defd8a187a513212cb19c9f2a800505395e66d9cd9eb3a96c291060224e7dd
- MD5 2b99e5c85cd8b0e6decf30d6daee094e
- SHA1 c3e7652e16a2e03d96b0274b5520d19b96196a03
- SHA512 040140638f08089e632f3dcde2705b86be8909b357aecf2bcdc7df358d50f6d886227ae18c55441761027425b647f5cef9bb73294650a626adf5fee3b7498a0f
- SSDEEP 6144:9mEdSunAqHdroKcykhPBbiMV5xzr2fXGzN:94ujKyUp+gOg
- TLSH T16464D0A7A354C5A2E75986B0A813CCB92D283E35D941762BA3C4BF5F3C7035A345932F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1