General
- Target 1b9079a4a0d291d52222b55790498fbb48a8f3e30b606a2c75bb950518e9b352
- Size 686KB
- Sample260714-mfat8aay3l
- SHA256 1b9079a4a0d291d52222b55790498fbb48a8f3e30b606a2c75bb950518e9b352
- MD5 3f80625093f23c13d9979d378f3db091
- SHA1 6c7cacf74e1bfc2c2433e34d9bb74be8b827512c
- SHA512 d88a4f85c2d408182910bebacd7ee0b359b94e4a6efad55521b931ad267b0cf2ea9c5f44492a2e7707d0fe23dd7ab39f66a4713237d560ea9a98e35b2fe55c2d
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJw:XLl7k/B2mGbUMoJnAhLrw
- TLSH T151E4D02D32AD1261E4AE9078E84BB151D67278351732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1b9079a4a0d291d52222b55790498fbb48a8f3e30b606a2c75bb950518e9b352.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 1b9079a4a0d291d52222b55790498fbb48a8f3e30b606a2c75bb950518e9b352
- Size 686KB
- SHA256 1b9079a4a0d291d52222b55790498fbb48a8f3e30b606a2c75bb950518e9b352
- MD5 3f80625093f23c13d9979d378f3db091
- SHA1 6c7cacf74e1bfc2c2433e34d9bb74be8b827512c
- SHA512 d88a4f85c2d408182910bebacd7ee0b359b94e4a6efad55521b931ad267b0cf2ea9c5f44492a2e7707d0fe23dd7ab39f66a4713237d560ea9a98e35b2fe55c2d
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJw:XLl7k/B2mGbUMoJnAhLrw
- TLSH T151E4D02D32AD1261E4AE9078E84BB151D67278351732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE