General
- Target ec1d0cefbf1b9793d81129b106a74de821ed9cf1ef7fb1d6b0b60efcc6766088
- Size 843KB
- Sample260531-mnqkmsgz5k
- SHA256 ec1d0cefbf1b9793d81129b106a74de821ed9cf1ef7fb1d6b0b60efcc6766088
- MD5 9b98af97a73c1637f7cc73828629ffe7
- SHA1 f7ce6066b6ff90d942ff5859d7a28784ba025ee2
- SHA512 5f055877b526a3d27bf86670aca34c777566d80047af28ce7481f5175a00d95ae591adb9d45a7b8e3689bd40b616bdddcd2552a5a86fc9bc54d22a075f39378f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoO:XLl7k/B2mGbUMoJnAhLrnAhUQQZ
- TLSH T19405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ec1d0cefbf1b9793d81129b106a74de821ed9cf1ef7fb1d6b0b60efcc6766088.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ec1d0cefbf1b9793d81129b106a74de821ed9cf1ef7fb1d6b0b60efcc6766088
- Size 843KB
- SHA256 ec1d0cefbf1b9793d81129b106a74de821ed9cf1ef7fb1d6b0b60efcc6766088
- MD5 9b98af97a73c1637f7cc73828629ffe7
- SHA1 f7ce6066b6ff90d942ff5859d7a28784ba025ee2
- SHA512 5f055877b526a3d27bf86670aca34c777566d80047af28ce7481f5175a00d95ae591adb9d45a7b8e3689bd40b616bdddcd2552a5a86fc9bc54d22a075f39378f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoO:XLl7k/B2mGbUMoJnAhLrnAhUQQZ
- TLSH T19405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE