General
- Target bf3b2cee42989b4f3c0bd9caa577e4fb2737b2a51eb8dc11f749c7dac16d1c33
- Size 1.9MB
- Sample260602-md5a2scs3j
- SHA256 bf3b2cee42989b4f3c0bd9caa577e4fb2737b2a51eb8dc11f749c7dac16d1c33
- MD5 64d0a30724c71076c63cfcb449126f06
- SHA1 9f4acc9f38866a252c201ec368b1113e7fe2d971
- SHA512 167bea029873151a9e0b63e2aec7e47029bb0bd6ac3fd6aab0393bae785f687ad9abf9ab1de509c4f4b2d700e96dedcc1d3b26f2e4d903ca1ec537b02121b309
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuI:WylFHUv6ReIt0jSrOW88XI
- TLSH T136957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bf3b2cee42989b4f3c0bd9caa577e4fb2737b2a51eb8dc11f749c7dac16d1c33.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bf3b2cee42989b4f3c0bd9caa577e4fb2737b2a51eb8dc11f749c7dac16d1c33
- Size 1.9MB
- SHA256 bf3b2cee42989b4f3c0bd9caa577e4fb2737b2a51eb8dc11f749c7dac16d1c33
- MD5 64d0a30724c71076c63cfcb449126f06
- SHA1 9f4acc9f38866a252c201ec368b1113e7fe2d971
- SHA512 167bea029873151a9e0b63e2aec7e47029bb0bd6ac3fd6aab0393bae785f687ad9abf9ab1de509c4f4b2d700e96dedcc1d3b26f2e4d903ca1ec537b02121b309
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuI:WylFHUv6ReIt0jSrOW88XI
- TLSH T136957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE