General
- Target 894a88083502a9ba3dfceb4f165742fd2b336d8c91b371e3d0e07841cf9e59df
- Size 842KB
- Sample260528-wtppzaas5x
- SHA256 894a88083502a9ba3dfceb4f165742fd2b336d8c91b371e3d0e07841cf9e59df
- MD5 1697aae50f1e4fa294f7ae92e8b69525
- SHA1 2d39d7bf61e0b8c5820ced5f8eb20ee1ca546a3d
- SHA512 a9751848a704e3ca2b6a530033f922451e72daa331dc2c309be8b60a63a72b183a8b36cecb3506bb6ee441c717315f0d72328cdb3cbc80c0165f522f184a685f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iot:XLl7k/B2mGbUMoJnAhLrnAhUQQW
- TLSH T15305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
894a88083502a9ba3dfceb4f165742fd2b336d8c91b371e3d0e07841cf9e59df.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 894a88083502a9ba3dfceb4f165742fd2b336d8c91b371e3d0e07841cf9e59df
- Size 842KB
- SHA256 894a88083502a9ba3dfceb4f165742fd2b336d8c91b371e3d0e07841cf9e59df
- MD5 1697aae50f1e4fa294f7ae92e8b69525
- SHA1 2d39d7bf61e0b8c5820ced5f8eb20ee1ca546a3d
- SHA512 a9751848a704e3ca2b6a530033f922451e72daa331dc2c309be8b60a63a72b183a8b36cecb3506bb6ee441c717315f0d72328cdb3cbc80c0165f522f184a685f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iot:XLl7k/B2mGbUMoJnAhLrnAhUQQW
- TLSH T15305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE