General
- Target 422c93f94b46335c8e1ae3ce960ae64d17f74c52a52d91385da6bb904cfda0d2
- Size 2.5MB
- Sample260602-mbeydaay91
- SHA256 422c93f94b46335c8e1ae3ce960ae64d17f74c52a52d91385da6bb904cfda0d2
- MD5 29c467a3170df45ddaba3c77381b2a08
- SHA1 725f374be030a7dc76c4ec463774ee1e4e5ce4a7
- SHA512 b112e3796cdf01ba636437cb2756e73f535497753968bc2b4cad2afa5a9f39b544d9d57697dd15305a222e6746cd7f2ddcb861f71614f12f4760b5794c74d66e
- SSDEEP 49152:AN1MzKEd4h783ZjZ/YAT2ukxL1ZhJMkj/8D1YpJf+dHq/jDzEYjJPAL:sX1h783bkxL1Ckj/8D1YpOKvo
- TLSH T1C0C5F0DDF36EFB1FD9E2D0BCB10E3F9828C45731675012652666EABFC1D44825821AE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
422c93f94b46335c8e1ae3ce960ae64d17f74c52a52d91385da6bb904cfda0d2.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 422c93f94b46335c8e1ae3ce960ae64d17f74c52a52d91385da6bb904cfda0d2
- Size 2.5MB
- SHA256 422c93f94b46335c8e1ae3ce960ae64d17f74c52a52d91385da6bb904cfda0d2
- MD5 29c467a3170df45ddaba3c77381b2a08
- SHA1 725f374be030a7dc76c4ec463774ee1e4e5ce4a7
- SHA512 b112e3796cdf01ba636437cb2756e73f535497753968bc2b4cad2afa5a9f39b544d9d57697dd15305a222e6746cd7f2ddcb861f71614f12f4760b5794c74d66e
- SSDEEP 49152:AN1MzKEd4h783ZjZ/YAT2ukxL1ZhJMkj/8D1YpJf+dHq/jDzEYjJPAL:sX1h783bkxL1Ckj/8D1YpOKvo
- TLSH T1C0C5F0DDF36EFB1FD9E2D0BCB10E3F9828C45731675012652666EABFC1D44825821AE8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.