General
- Target ebd6d868bc192e848bdb7cd97bfc64639c5aaedfc36f2f47866cbb34dbb841f7
- Size 843KB
- Sample260527-nd78daev9s
- SHA256 ebd6d868bc192e848bdb7cd97bfc64639c5aaedfc36f2f47866cbb34dbb841f7
- MD5 71b2ea9cf14eaed22b8ac34af8d1cc48
- SHA1 95fb1b350227325d7d8682f2883d0e66e27953ad
- SHA512 97212e9e821a765c3ba58ea2e3050595c78744b821f434228d4c4b9f2d779d365981bc54cf0e0878886b29f777f4be074449d412c0c9c4bf76d5541ed3c4bc98
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io3:XLl7k/B2mGbUMoJnAhLrnAhUQQI
- TLSH T12A05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ebd6d868bc192e848bdb7cd97bfc64639c5aaedfc36f2f47866cbb34dbb841f7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ebd6d868bc192e848bdb7cd97bfc64639c5aaedfc36f2f47866cbb34dbb841f7
- Size 843KB
- SHA256 ebd6d868bc192e848bdb7cd97bfc64639c5aaedfc36f2f47866cbb34dbb841f7
- MD5 71b2ea9cf14eaed22b8ac34af8d1cc48
- SHA1 95fb1b350227325d7d8682f2883d0e66e27953ad
- SHA512 97212e9e821a765c3ba58ea2e3050595c78744b821f434228d4c4b9f2d779d365981bc54cf0e0878886b29f777f4be074449d412c0c9c4bf76d5541ed3c4bc98
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io3:XLl7k/B2mGbUMoJnAhLrnAhUQQI
- TLSH T12A05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE