General
- Target 0b03b1e58e78af84cb925301b4207ae1bf5170aee20598b12dda10ff886f8863
- Size 841KB
- Sample260529-a9aebsft5v
- SHA256 0b03b1e58e78af84cb925301b4207ae1bf5170aee20598b12dda10ff886f8863
- MD5 e94a8cfec27033b82ffac11bf3f8e84a
- SHA1 5dd19bedd9932612d907bc70e5c0d4efba6d3f1a
- SHA512 d6eaa6dc13a8dfd5b31309d86e9cbf384cf835ad3a9122fe5455da02ae34d5db24b9252dd3292d610a9d78aa590930c888d6ba19c438c12a8d263c8559950b95
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioj:XLl7k/B2mGbUMoJnAhLrnAhUQQk
- TLSH T15505C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0b03b1e58e78af84cb925301b4207ae1bf5170aee20598b12dda10ff886f8863.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0b03b1e58e78af84cb925301b4207ae1bf5170aee20598b12dda10ff886f8863
- Size 841KB
- SHA256 0b03b1e58e78af84cb925301b4207ae1bf5170aee20598b12dda10ff886f8863
- MD5 e94a8cfec27033b82ffac11bf3f8e84a
- SHA1 5dd19bedd9932612d907bc70e5c0d4efba6d3f1a
- SHA512 d6eaa6dc13a8dfd5b31309d86e9cbf384cf835ad3a9122fe5455da02ae34d5db24b9252dd3292d610a9d78aa590930c888d6ba19c438c12a8d263c8559950b95
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioj:XLl7k/B2mGbUMoJnAhLrnAhUQQk
- TLSH T15505C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE