General
- Target af778f7dfa8db761cde762ac6d2d75cc2a617babdc83f270b83a35839e438a5b
- Size 845KB
- Sample260709-evyktscw2l
- SHA256 af778f7dfa8db761cde762ac6d2d75cc2a617babdc83f270b83a35839e438a5b
- MD5 f1f3e9abac3bd1b48f8131f70110cfdb
- SHA1 87ca2ad8bff183a69e68eb773016c0d42a5c666b
- SHA512 8308062f4f46d9630c8518ad2622c31e4541d22d327e3c1b633eee7f3bbe918ce6d7af1fd990adc5cd8a62c181f2cca5e3fa50af2ec3e4f221e93fd6c5c8bfc1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoW:XLl7k/B2mGbUMoJnAhLrnAhUQQ9
- TLSH T18005CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
af778f7dfa8db761cde762ac6d2d75cc2a617babdc83f270b83a35839e438a5b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target af778f7dfa8db761cde762ac6d2d75cc2a617babdc83f270b83a35839e438a5b
- Size 845KB
- SHA256 af778f7dfa8db761cde762ac6d2d75cc2a617babdc83f270b83a35839e438a5b
- MD5 f1f3e9abac3bd1b48f8131f70110cfdb
- SHA1 87ca2ad8bff183a69e68eb773016c0d42a5c666b
- SHA512 8308062f4f46d9630c8518ad2622c31e4541d22d327e3c1b633eee7f3bbe918ce6d7af1fd990adc5cd8a62c181f2cca5e3fa50af2ec3e4f221e93fd6c5c8bfc1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoW:XLl7k/B2mGbUMoJnAhLrnAhUQQ9
- TLSH T18005CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE