General
- Target 18b55d149b0d90ba5f08fd09279c2d81ba9cbd961f7a81a0a4afb334ad014f8e
- Size 841KB
- Sample260714-jfprlabt3v
- SHA256 18b55d149b0d90ba5f08fd09279c2d81ba9cbd961f7a81a0a4afb334ad014f8e
- MD5 f7140025adeaf76a78c3e46b9c8d7746
- SHA1 7e78b12db02210abf8cf13479475584d116fed26
- SHA512 3a281f83b8ab78eb0e08ee5bcd91b5877129ad4c0778301e637e07e01f508e5f2f27548237c2436b1782dee6ba69b63dbca96e2039294e4f0f77028d220d7165
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoJ:XLl7k/B2mGbUMoJnAhLrnAhUQQi
- TLSH T1BB05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
18b55d149b0d90ba5f08fd09279c2d81ba9cbd961f7a81a0a4afb334ad014f8e.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 18b55d149b0d90ba5f08fd09279c2d81ba9cbd961f7a81a0a4afb334ad014f8e
- Size 841KB
- SHA256 18b55d149b0d90ba5f08fd09279c2d81ba9cbd961f7a81a0a4afb334ad014f8e
- MD5 f7140025adeaf76a78c3e46b9c8d7746
- SHA1 7e78b12db02210abf8cf13479475584d116fed26
- SHA512 3a281f83b8ab78eb0e08ee5bcd91b5877129ad4c0778301e637e07e01f508e5f2f27548237c2436b1782dee6ba69b63dbca96e2039294e4f0f77028d220d7165
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoJ:XLl7k/B2mGbUMoJnAhLrnAhUQQi
- TLSH T1BB05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE