General
- Target 3234feb436a8e16d3296dd7ae2bc1e7dfbddcd9d49bc6e4f02d4f76693a2aa3d
- Size 2.7MB
- Sample260529-mcnlxahs2w
- SHA256 3234feb436a8e16d3296dd7ae2bc1e7dfbddcd9d49bc6e4f02d4f76693a2aa3d
- MD5 87d33025d9b1d8e3ae49b8e43777924f
- SHA1 70ed6961bb20189fbe98fca6d6272d77cbe637fe
- SHA512 c99b799abf30dac36831cfb1c89a89ce358d0e7977827eb7489e452f29b2fa4c6d77da9e862911a87f0036263b2e0b0e071648e1b21b137a1c28d662c023af11
- SSDEEP 49152:Fwly3r1kSvXRkLhyLNIb1H1KDX4Mq20am+mM1oAqzEs3h2Hx:Fwc3r1kYRGQNIb1H1jam5h2H
- TLSH T168D5E0C021CD9FB0D2ECBE3DC61EBB2891126851CF94E197A772C51B49725E223F5A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3234feb436a8e16d3296dd7ae2bc1e7dfbddcd9d49bc6e4f02d4f76693a2aa3d.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3234feb436a8e16d3296dd7ae2bc1e7dfbddcd9d49bc6e4f02d4f76693a2aa3d
- Size 2.7MB
- SHA256 3234feb436a8e16d3296dd7ae2bc1e7dfbddcd9d49bc6e4f02d4f76693a2aa3d
- MD5 87d33025d9b1d8e3ae49b8e43777924f
- SHA1 70ed6961bb20189fbe98fca6d6272d77cbe637fe
- SHA512 c99b799abf30dac36831cfb1c89a89ce358d0e7977827eb7489e452f29b2fa4c6d77da9e862911a87f0036263b2e0b0e071648e1b21b137a1c28d662c023af11
- SSDEEP 49152:Fwly3r1kSvXRkLhyLNIb1H1KDX4Mq20am+mM1oAqzEs3h2Hx:Fwc3r1kYRGQNIb1H1jam5h2H
- TLSH T168D5E0C021CD9FB0D2ECBE3DC61EBB2891126851CF94E197A772C51B49725E223F5A63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.