General
- Target 056f1701a145a7c5d7e27f5f73c50f95894eace49b618b09091ef346cb2bb78d
- Size 1.9MB
- Sample260529-a2drsaez2p
- SHA256 056f1701a145a7c5d7e27f5f73c50f95894eace49b618b09091ef346cb2bb78d
- MD5 b8292ec6fe5276f0df0f16c3d775e313
- SHA1 a98c695d800285058ae912c95d5a42fd8ec8adb3
- SHA512 b04bd791cd734c6c9ffa19ff537563ba0e514f3087af1e02f7336457055cd21016ee88cf0b2e5fe50f3a055b1cbe13fe138fca5d0046c044aadea36bea0edce6
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQu9:WylFHUv6ReIt0jSrOW88X9
- TLSH T17E957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
056f1701a145a7c5d7e27f5f73c50f95894eace49b618b09091ef346cb2bb78d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 056f1701a145a7c5d7e27f5f73c50f95894eace49b618b09091ef346cb2bb78d
- Size 1.9MB
- SHA256 056f1701a145a7c5d7e27f5f73c50f95894eace49b618b09091ef346cb2bb78d
- MD5 b8292ec6fe5276f0df0f16c3d775e313
- SHA1 a98c695d800285058ae912c95d5a42fd8ec8adb3
- SHA512 b04bd791cd734c6c9ffa19ff537563ba0e514f3087af1e02f7336457055cd21016ee88cf0b2e5fe50f3a055b1cbe13fe138fca5d0046c044aadea36bea0edce6
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQu9:WylFHUv6ReIt0jSrOW88X9
- TLSH T17E957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE