General
- Target 1acf8f7e8a76f416b942f7be3a82079d9930f7f253ab8e9117ae135d3dbc2946
- Size 2.5MB
- Sample260602-lrgapsat4s
- SHA256 1acf8f7e8a76f416b942f7be3a82079d9930f7f253ab8e9117ae135d3dbc2946
- MD5 e74f5ed4b700503c97df450508733620
- SHA1 ee6b7748402986a689aad0d06d5c8d4b9a55924e
- SHA512 d269867a53bf2df87239f1b79615c81e8b8cf22686f90164cdd20fe56fde0f6a37a00af94eb41e4d3f08ab97ef465753c47469bdb69bf5ede3d111ddf82a7d40
- SSDEEP 49152:1pch577u4ExFeYr1YqG+jC8KxXUU+3omYdpuKeYHj5H+ts2KPE4RelOaJdI:1arExH1YqG+u8KxXUU+3cp7j5H+tSE4w
- TLSH T144C5DF3890203657F011C77CA9516574FC4E4D1AE5CD87AAFA84C0FF1AEB276B7682E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1acf8f7e8a76f416b942f7be3a82079d9930f7f253ab8e9117ae135d3dbc2946.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1acf8f7e8a76f416b942f7be3a82079d9930f7f253ab8e9117ae135d3dbc2946
- Size 2.5MB
- SHA256 1acf8f7e8a76f416b942f7be3a82079d9930f7f253ab8e9117ae135d3dbc2946
- MD5 e74f5ed4b700503c97df450508733620
- SHA1 ee6b7748402986a689aad0d06d5c8d4b9a55924e
- SHA512 d269867a53bf2df87239f1b79615c81e8b8cf22686f90164cdd20fe56fde0f6a37a00af94eb41e4d3f08ab97ef465753c47469bdb69bf5ede3d111ddf82a7d40
- SSDEEP 49152:1pch577u4ExFeYr1YqG+jC8KxXUU+3omYdpuKeYHj5H+ts2KPE4RelOaJdI:1arExH1YqG+u8KxXUU+3cp7j5H+tSE4w
- TLSH T144C5DF3890203657F011C77CA9516574FC4E4D1AE5CD87AAFA84C0FF1AEB276B7682E8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.