General
- Target b6436c35affbf3df51d8c29920a8633e83032f3bfc3e22efb54bee0c3c4dec27
- Size 1.9MB
- Sample260714-j2bf4ag19r
- SHA256 b6436c35affbf3df51d8c29920a8633e83032f3bfc3e22efb54bee0c3c4dec27
- MD5 6bd0303f8abae3d0d8ed75400482a3bf
- SHA1 dd8f903fb9d3d1ebd03b5948b126c685448c6880
- SHA512 95de9793b61a5f878fba5385708b8b850ce39e562fbd460ed0d3f56f74ff373af8e6e6db7f96b441284a9ce9777f36926c376248da1b65d2d1a3ce2dbf6628f8
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQui:WylFHUv6ReIt0jSrOW88Xi
- TLSH T10C957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b6436c35affbf3df51d8c29920a8633e83032f3bfc3e22efb54bee0c3c4dec27.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b6436c35affbf3df51d8c29920a8633e83032f3bfc3e22efb54bee0c3c4dec27
- Size 1.9MB
- SHA256 b6436c35affbf3df51d8c29920a8633e83032f3bfc3e22efb54bee0c3c4dec27
- MD5 6bd0303f8abae3d0d8ed75400482a3bf
- SHA1 dd8f903fb9d3d1ebd03b5948b126c685448c6880
- SHA512 95de9793b61a5f878fba5385708b8b850ce39e562fbd460ed0d3f56f74ff373af8e6e6db7f96b441284a9ce9777f36926c376248da1b65d2d1a3ce2dbf6628f8
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQui:WylFHUv6ReIt0jSrOW88Xi
- TLSH T10C957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE