General
- Target ef3a54a35d795a2e58f97516a2759a137ee509ee257571a9fb92778905b3c1bd
- Size 845KB
- Sample260712-hppyaafw9v
- SHA256 ef3a54a35d795a2e58f97516a2759a137ee509ee257571a9fb92778905b3c1bd
- MD5 4928cc2e259b8656f5d1fabc07edab02
- SHA1 44d56e88280798694a9303c0f8ccfdcd4d8f4d7f
- SHA512 edc49453ff8ee3d8f295c642a7e97b0238abdaf84835ecb08204c6de5655deb873a6a3ed9092ce60b8b8dcba36879c01e40b098983af4b2eef883436554ad87a
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoJ:XLl7k/B2mGbUMoJnAhLrnAhUQQu
- TLSH T14405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ef3a54a35d795a2e58f97516a2759a137ee509ee257571a9fb92778905b3c1bd.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ef3a54a35d795a2e58f97516a2759a137ee509ee257571a9fb92778905b3c1bd
- Size 845KB
- SHA256 ef3a54a35d795a2e58f97516a2759a137ee509ee257571a9fb92778905b3c1bd
- MD5 4928cc2e259b8656f5d1fabc07edab02
- SHA1 44d56e88280798694a9303c0f8ccfdcd4d8f4d7f
- SHA512 edc49453ff8ee3d8f295c642a7e97b0238abdaf84835ecb08204c6de5655deb873a6a3ed9092ce60b8b8dcba36879c01e40b098983af4b2eef883436554ad87a
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoJ:XLl7k/B2mGbUMoJnAhLrnAhUQQu
- TLSH T14405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE