General
- Target 0851ac50087cedffb2903b9aeb8ab17122fe83882fb2b97286e25dd3541db1a8
- Size 2.6MB
- Sample260528-rzbcbabv2r
- SHA256 0851ac50087cedffb2903b9aeb8ab17122fe83882fb2b97286e25dd3541db1a8
- MD5 a25995aeb3826119de8817eebf1a7a5a
- SHA1 3bfeb0143e53b3df20dfd2db3ceb93614afc0aaf
- SHA512 572e7f5cbf955c5bb29d2c2fe90f93352864c36bcc2440d47f1d80b8e36eb2d7cc9452e3ce5a451a4d69bfeb01880d57cf83c0a70927d3f8ed63b3cba19a9efe
- SSDEEP 49152:B0C32qEPbi4cG+m0zVT+4VxxmJM8a3vLZW7HjEBn:BRIIm0zVxmJW/LZGjEB
- TLSH T18AC5E0C2ED7FCA6DF147D0303E78736ACF625A99E86950761658EA3740CCE4A0417F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0851ac50087cedffb2903b9aeb8ab17122fe83882fb2b97286e25dd3541db1a8.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 0851ac50087cedffb2903b9aeb8ab17122fe83882fb2b97286e25dd3541db1a8
- Size 2.6MB
- SHA256 0851ac50087cedffb2903b9aeb8ab17122fe83882fb2b97286e25dd3541db1a8
- MD5 a25995aeb3826119de8817eebf1a7a5a
- SHA1 3bfeb0143e53b3df20dfd2db3ceb93614afc0aaf
- SHA512 572e7f5cbf955c5bb29d2c2fe90f93352864c36bcc2440d47f1d80b8e36eb2d7cc9452e3ce5a451a4d69bfeb01880d57cf83c0a70927d3f8ed63b3cba19a9efe
- SSDEEP 49152:B0C32qEPbi4cG+m0zVT+4VxxmJM8a3vLZW7HjEBn:BRIIm0zVxmJW/LZGjEB
- TLSH T18AC5E0C2ED7FCA6DF147D0303E78736ACF625A99E86950761658EA3740CCE4A0417F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.