General
- Target 5cdab2cd69174b6c1e8b87d3fac18d94ce1b8350def6cb536ea2417d77b9cbb5
- Size 1.2MB
- Sample260703-kc3dysdy3v
- SHA256 5cdab2cd69174b6c1e8b87d3fac18d94ce1b8350def6cb536ea2417d77b9cbb5
- MD5 0e592c29c00d17d9c377454a5489f82b
- SHA1 e501296fd08c0879b744d8d515e8af4ff04a8003
- SHA512 f6ec3d59f329fcae58f19d5c663f9db8906b2bb94435aa8879e500ca1265d50303f227aa1008075fdf1c95899e7751857626d6e7abe3185f2896c92f4cbba40c
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHk:VptHFyrsy7t+TSQDsy777vxCRbak
- TLSH T12A551229776C8B2AC0CD1D32B51EFEFC6A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5cdab2cd69174b6c1e8b87d3fac18d94ce1b8350def6cb536ea2417d77b9cbb5.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5cdab2cd69174b6c1e8b87d3fac18d94ce1b8350def6cb536ea2417d77b9cbb5
- Size 1.2MB
- SHA256 5cdab2cd69174b6c1e8b87d3fac18d94ce1b8350def6cb536ea2417d77b9cbb5
- MD5 0e592c29c00d17d9c377454a5489f82b
- SHA1 e501296fd08c0879b744d8d515e8af4ff04a8003
- SHA512 f6ec3d59f329fcae58f19d5c663f9db8906b2bb94435aa8879e500ca1265d50303f227aa1008075fdf1c95899e7751857626d6e7abe3185f2896c92f4cbba40c
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHk:VptHFyrsy7t+TSQDsy777vxCRbak
- TLSH T12A551229776C8B2AC0CD1D32B51EFEFC6A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE