General
- Target 228b1ab2cbeb1032ce7505766a37db971ccc3b7a23c30c0b0dbf65a68d556b18
- Size 1.1MB
- Sample260703-khx2esdy71
- SHA256 228b1ab2cbeb1032ce7505766a37db971ccc3b7a23c30c0b0dbf65a68d556b18
- MD5 b1eb4f8ea2fdfcf57a388db8e0d3b9f9
- SHA1 e3b343d219346c0c8d439320b5d38e10b9117d33
- SHA512 19d1f4552cf15bae6d6d6eb814c7db77569ea25351d98185078bd29e36f3294288f118893453fc9aed2eec514ba39c6deb1a1834dec4e3922df111cb551c6d48
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnq:AylFHUv6ReIt0jSrOt
- TLSH T13E357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
228b1ab2cbeb1032ce7505766a37db971ccc3b7a23c30c0b0dbf65a68d556b18.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
228b1ab2cbeb1032ce7505766a37db971ccc3b7a23c30c0b0dbf65a68d556b18.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 228b1ab2cbeb1032ce7505766a37db971ccc3b7a23c30c0b0dbf65a68d556b18
- Size 1.1MB
- SHA256 228b1ab2cbeb1032ce7505766a37db971ccc3b7a23c30c0b0dbf65a68d556b18
- MD5 b1eb4f8ea2fdfcf57a388db8e0d3b9f9
- SHA1 e3b343d219346c0c8d439320b5d38e10b9117d33
- SHA512 19d1f4552cf15bae6d6d6eb814c7db77569ea25351d98185078bd29e36f3294288f118893453fc9aed2eec514ba39c6deb1a1834dec4e3922df111cb551c6d48
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnq:AylFHUv6ReIt0jSrOt
- TLSH T13E357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE