General
- Target d67a2bd425b66d2ec6ad99bc5ea0a68eac689c2955094e1f7caf6eb71d75e34a
- Size 1.2MB
- Sample260703-kctf2sax5p
- SHA256 d67a2bd425b66d2ec6ad99bc5ea0a68eac689c2955094e1f7caf6eb71d75e34a
- MD5 f50f255e859f9259a26b0b9101efca14
- SHA1 016055e364dbc95cf446ad67f7e7a67cdc1b86ba
- SHA512 4965db6221e323e02d606fba6c7f39d5b4f59dede7c1dc0d5ed4e5a4d3c79d7e6e50e7d6ac7e3a969a3134c5ec6703dff1f9982444c2d3d85340160ded1ccf02
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHB:VptHFyrsy7t+TSQDsy777vxCRbaB
- TLSH T111551229776C8B2AC0CD1D32B51EFEFC6A288D558B79C5773AB47B4A183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d67a2bd425b66d2ec6ad99bc5ea0a68eac689c2955094e1f7caf6eb71d75e34a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d67a2bd425b66d2ec6ad99bc5ea0a68eac689c2955094e1f7caf6eb71d75e34a
- Size 1.2MB
- SHA256 d67a2bd425b66d2ec6ad99bc5ea0a68eac689c2955094e1f7caf6eb71d75e34a
- MD5 f50f255e859f9259a26b0b9101efca14
- SHA1 016055e364dbc95cf446ad67f7e7a67cdc1b86ba
- SHA512 4965db6221e323e02d606fba6c7f39d5b4f59dede7c1dc0d5ed4e5a4d3c79d7e6e50e7d6ac7e3a969a3134c5ec6703dff1f9982444c2d3d85340160ded1ccf02
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHB:VptHFyrsy7t+TSQDsy777vxCRbaB
- TLSH T111551229776C8B2AC0CD1D32B51EFEFC6A288D558B79C5773AB47B4A183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE