General
- Target c56c0f9911c112b5ce5e0671cc3d2dd1c4cfdc7e42a6e0bf5957ba901a96a9e5
- Size 1.9MB
- Sample260714-hdb72sas2s
- SHA256 c56c0f9911c112b5ce5e0671cc3d2dd1c4cfdc7e42a6e0bf5957ba901a96a9e5
- MD5 6f1139338203e4548a3243d62a4256f6
- SHA1 7fc07de028737431cfd838b6d303b3d9948eb848
- SHA512 63dacb1b7805c6e2b117eb0c5b731fb95b789c800f28f81b45e4fb390b2b4fb061b4e2305c9f7af2dbb58411a4b71d0a515017827c3fdac1ffb6274817f0ec2a
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuf:WylFHUv6ReIt0jSrOW88Xf
- TLSH T1E2957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c56c0f9911c112b5ce5e0671cc3d2dd1c4cfdc7e42a6e0bf5957ba901a96a9e5.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target c56c0f9911c112b5ce5e0671cc3d2dd1c4cfdc7e42a6e0bf5957ba901a96a9e5
- Size 1.9MB
- SHA256 c56c0f9911c112b5ce5e0671cc3d2dd1c4cfdc7e42a6e0bf5957ba901a96a9e5
- MD5 6f1139338203e4548a3243d62a4256f6
- SHA1 7fc07de028737431cfd838b6d303b3d9948eb848
- SHA512 63dacb1b7805c6e2b117eb0c5b731fb95b789c800f28f81b45e4fb390b2b4fb061b4e2305c9f7af2dbb58411a4b71d0a515017827c3fdac1ffb6274817f0ec2a
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuf:WylFHUv6ReIt0jSrOW88Xf
- TLSH T1E2957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE