General
- Target 6b2bc2d0ddd57b3fa5228fb4845db31bb15e29f9fe876603f8646f5e6c9ec79e
- Size 629KB
- Sample260714-gexppsey2m
- SHA256 6b2bc2d0ddd57b3fa5228fb4845db31bb15e29f9fe876603f8646f5e6c9ec79e
- MD5 2780e756835d85d8f3ced497aaa8b6ed
- SHA1 a3f8476f289fd46967e2f3ded909e84ab5922249
- SHA512 81b82cff0735896de6efdf8dcba9dc63887ac1b869a5342b76228a37f74c4ffa8ee95e856fc7a8b30a56718685a25d5f89e0dba04cd0b5a11aada40a1b377f2a
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKG:XLl7k/B2mGbUMoJnAhtKG
- TLSH T153D4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6b2bc2d0ddd57b3fa5228fb4845db31bb15e29f9fe876603f8646f5e6c9ec79e.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6b2bc2d0ddd57b3fa5228fb4845db31bb15e29f9fe876603f8646f5e6c9ec79e
- Size 629KB
- SHA256 6b2bc2d0ddd57b3fa5228fb4845db31bb15e29f9fe876603f8646f5e6c9ec79e
- MD5 2780e756835d85d8f3ced497aaa8b6ed
- SHA1 a3f8476f289fd46967e2f3ded909e84ab5922249
- SHA512 81b82cff0735896de6efdf8dcba9dc63887ac1b869a5342b76228a37f74c4ffa8ee95e856fc7a8b30a56718685a25d5f89e0dba04cd0b5a11aada40a1b377f2a
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKG:XLl7k/B2mGbUMoJnAhtKG
- TLSH T153D4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE