General
- Target feb37fa55282baaff453fcb1d0cf612b88794d995a0cb91aec70ba048cc2e63c
- Size 2.7MB
- Sample260529-mcnlxahs2v
- SHA256 feb37fa55282baaff453fcb1d0cf612b88794d995a0cb91aec70ba048cc2e63c
- MD5 5e7ebc94c40b52399bdbfbb265a1bf26
- SHA1 3fe58681c272a8ca482e794944d8318bd1fe5e85
- SHA512 0f51f198b364d866c7282a6f25af20921d5c60f28a40555e91f282650a7193e7eaa7fd7d243c5ffed8ca7e1bc7c7764ca3b64bba6d5b8977968e8de1aa41f3dd
- SSDEEP 49152:hP+KmO2+yhh+0ySRe3iMVjqB9wmZ2HsYxYOdBBiQsKURk7Ur2Li38iDCA1CBMB:6+yLySRe3iMVmB9wmZ2HsYyOdBBiQrU
- TLSH T14BD5DF2066255D0BF79AB4B4A86E39D172C3E86E83F3DEE5645C71209E081743C7C7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
feb37fa55282baaff453fcb1d0cf612b88794d995a0cb91aec70ba048cc2e63c.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target feb37fa55282baaff453fcb1d0cf612b88794d995a0cb91aec70ba048cc2e63c
- Size 2.7MB
- SHA256 feb37fa55282baaff453fcb1d0cf612b88794d995a0cb91aec70ba048cc2e63c
- MD5 5e7ebc94c40b52399bdbfbb265a1bf26
- SHA1 3fe58681c272a8ca482e794944d8318bd1fe5e85
- SHA512 0f51f198b364d866c7282a6f25af20921d5c60f28a40555e91f282650a7193e7eaa7fd7d243c5ffed8ca7e1bc7c7764ca3b64bba6d5b8977968e8de1aa41f3dd
- SSDEEP 49152:hP+KmO2+yhh+0ySRe3iMVjqB9wmZ2HsYxYOdBBiQsKURk7Ur2Li38iDCA1CBMB:6+yLySRe3iMVmB9wmZ2HsYyOdBBiQrU
- TLSH T14BD5DF2066255D0BF79AB4B4A86E39D172C3E86E83F3DEE5645C71209E081743C7C7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.