General
- Target 4236d896e1d175407a6d61e02be3dc763a29b381d05f1a01aee4b9dc2b6ccf25
- Size 1.3MB
- Sample260711-kxdw4aex2m
- SHA256 4236d896e1d175407a6d61e02be3dc763a29b381d05f1a01aee4b9dc2b6ccf25
- MD5 e2783d0926c5e9d4ba024b0a898f1c5a
- SHA1 56755cf5727db3e891ee359cd5e8b185fdeee8ab
- SHA512 57239a132a0f3d5d90f2b848af619aa7d36e741f5c953e94b826bb37d0b86d7f423a30fe642bdb4dee539a98185260f3f2d6f0d4820225f29175768b5f74651d
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nio:eylFHUv6ReIt0jSrO/
- TLSH T16A557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4236d896e1d175407a6d61e02be3dc763a29b381d05f1a01aee4b9dc2b6ccf25.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4236d896e1d175407a6d61e02be3dc763a29b381d05f1a01aee4b9dc2b6ccf25
- Size 1.3MB
- SHA256 4236d896e1d175407a6d61e02be3dc763a29b381d05f1a01aee4b9dc2b6ccf25
- MD5 e2783d0926c5e9d4ba024b0a898f1c5a
- SHA1 56755cf5727db3e891ee359cd5e8b185fdeee8ab
- SHA512 57239a132a0f3d5d90f2b848af619aa7d36e741f5c953e94b826bb37d0b86d7f423a30fe642bdb4dee539a98185260f3f2d6f0d4820225f29175768b5f74651d
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nio:eylFHUv6ReIt0jSrO/
- TLSH T16A557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE