General
- Target db5ced39b32d55d43b7e8a49f7f78b6ec4666d4f92f6464a18b3e4bfc414ba1e
- Size 1.1MB
- Sample260707-kk2gmabs3n
- SHA256 db5ced39b32d55d43b7e8a49f7f78b6ec4666d4f92f6464a18b3e4bfc414ba1e
- MD5 3b67ab8e18c6f7521a902a35cc6a5486
- SHA1 1e5a921d63a448a8f928cb52b4c3f3b5d867710a
- SHA512 50153336f47e3c6062d759a7dbf9f7d0d5936da0993ad3bcaead05ef79d45818ecaedd9d92285d02cf5cf65f7ef723c0c1a4d1d29b82a431d3b4ebd1d3126c99
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnd:AylFHUv6ReIt0jSrOm
- TLSH T145357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
db5ced39b32d55d43b7e8a49f7f78b6ec4666d4f92f6464a18b3e4bfc414ba1e.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
db5ced39b32d55d43b7e8a49f7f78b6ec4666d4f92f6464a18b3e4bfc414ba1e.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target db5ced39b32d55d43b7e8a49f7f78b6ec4666d4f92f6464a18b3e4bfc414ba1e
- Size 1.1MB
- SHA256 db5ced39b32d55d43b7e8a49f7f78b6ec4666d4f92f6464a18b3e4bfc414ba1e
- MD5 3b67ab8e18c6f7521a902a35cc6a5486
- SHA1 1e5a921d63a448a8f928cb52b4c3f3b5d867710a
- SHA512 50153336f47e3c6062d759a7dbf9f7d0d5936da0993ad3bcaead05ef79d45818ecaedd9d92285d02cf5cf65f7ef723c0c1a4d1d29b82a431d3b4ebd1d3126c99
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnd:AylFHUv6ReIt0jSrOm
- TLSH T145357E02B94DC2B1D18C14712D6F73366D349A5A3B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE