General
- Target 428aecd2c864ed2885b9079444901d6cb0668f63a50f3cafd18b0f3ba03e4fab
- Size 2.7MB
- Sample260529-hdnabaev4z
- SHA256 428aecd2c864ed2885b9079444901d6cb0668f63a50f3cafd18b0f3ba03e4fab
- MD5 3b9f96b82c161a7ac5d5c6fbfa9519f0
- SHA1 23c5ba0152abe781918ccc0f0dbd1141d80957f7
- SHA512 582f6a585ee6d4b00360f6a9bb3b2b3cebfc7f0f5b5f0e376c63041f24240e932004bfae68a8803e415c955331f8cf05ad00764661af74963fca1cb650c8c500
- SSDEEP 49152:2fI8zRr12oYkBX27y5Mmh3iDirxgauJPS3x1mhg4t5LIOVwnU:2f92aXV5MciDpfQx1p4t5LnVw
- TLSH T199D5CEC09448A107DF9AF17DC6DD893AC2D97CA002678127D02B71AA9B179E355EF2F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
428aecd2c864ed2885b9079444901d6cb0668f63a50f3cafd18b0f3ba03e4fab.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 428aecd2c864ed2885b9079444901d6cb0668f63a50f3cafd18b0f3ba03e4fab
- Size 2.7MB
- SHA256 428aecd2c864ed2885b9079444901d6cb0668f63a50f3cafd18b0f3ba03e4fab
- MD5 3b9f96b82c161a7ac5d5c6fbfa9519f0
- SHA1 23c5ba0152abe781918ccc0f0dbd1141d80957f7
- SHA512 582f6a585ee6d4b00360f6a9bb3b2b3cebfc7f0f5b5f0e376c63041f24240e932004bfae68a8803e415c955331f8cf05ad00764661af74963fca1cb650c8c500
- SSDEEP 49152:2fI8zRr12oYkBX27y5Mmh3iDirxgauJPS3x1mhg4t5LIOVwnU:2f92aXV5MciDpfQx1p4t5LnVw
- TLSH T199D5CEC09448A107DF9AF17DC6DD893AC2D97CA002678127D02B71AA9B179E355EF2F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.