General
- Target ec4667b2a8f4d173de35061d239a7c572e4944c9f9e7f8c8934780d4be3a41cb
- Size 1.2MB
- Sample260528-cphlbaft4v
- SHA256 ec4667b2a8f4d173de35061d239a7c572e4944c9f9e7f8c8934780d4be3a41cb
- MD5 23abf677f0c53a507fdb19a23e05cd72
- SHA1 49863d7935860c368a0ead502efcda18c533b610
- SHA512 8275e1cea1d0c2289bff8e7edd42a0825fa1816604a12927eafc23c46382cad0bb20c8be09d5753375b031fefa3d1d947081e95c253d1b1c7978a89667402eeb
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHO:VptHFyrsy7t+TSQDsy777vxCRbaO
- TLSH T1E7551229776C8B2AC0CD1D32B51EFEF86A288D548B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ec4667b2a8f4d173de35061d239a7c572e4944c9f9e7f8c8934780d4be3a41cb.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ec4667b2a8f4d173de35061d239a7c572e4944c9f9e7f8c8934780d4be3a41cb
- Size 1.2MB
- SHA256 ec4667b2a8f4d173de35061d239a7c572e4944c9f9e7f8c8934780d4be3a41cb
- MD5 23abf677f0c53a507fdb19a23e05cd72
- SHA1 49863d7935860c368a0ead502efcda18c533b610
- SHA512 8275e1cea1d0c2289bff8e7edd42a0825fa1816604a12927eafc23c46382cad0bb20c8be09d5753375b031fefa3d1d947081e95c253d1b1c7978a89667402eeb
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHO:VptHFyrsy7t+TSQDsy777vxCRbaO
- TLSH T1E7551229776C8B2AC0CD1D32B51EFEF86A288D548B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE