General
- Target d56fa7a3aa499ca106d9b50ee181d4070b3da20060a76a0944faf9b0c4c49833
- Size 1.4MB
- Sample260528-d5ep2aey2n
- SHA256 d56fa7a3aa499ca106d9b50ee181d4070b3da20060a76a0944faf9b0c4c49833
- MD5 b316d2ad87bbffef0bbebf599156c499
- SHA1 e68d940a2b63d8a52657db963d0c2f6695b76535
- SHA512 5c2f88eba22e711a7260a3855eecb3e3cd58e03b9901a9baec438edaf5c26e264fd044c408c8b3dc0fb428fd36ec3cf6dc477e6c26c6d9f52e08b2111a328863
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkf:MLl7k/B2mGbUMoLO
- TLSH T1BE65F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d56fa7a3aa499ca106d9b50ee181d4070b3da20060a76a0944faf9b0c4c49833.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d56fa7a3aa499ca106d9b50ee181d4070b3da20060a76a0944faf9b0c4c49833
- Size 1.4MB
- SHA256 d56fa7a3aa499ca106d9b50ee181d4070b3da20060a76a0944faf9b0c4c49833
- MD5 b316d2ad87bbffef0bbebf599156c499
- SHA1 e68d940a2b63d8a52657db963d0c2f6695b76535
- SHA512 5c2f88eba22e711a7260a3855eecb3e3cd58e03b9901a9baec438edaf5c26e264fd044c408c8b3dc0fb428fd36ec3cf6dc477e6c26c6d9f52e08b2111a328863
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkf:MLl7k/B2mGbUMoLO
- TLSH T1BE65F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE