General
- Target 2e2b8cc57ca0383a4ed4748b9f05492725e515398a2c74fb6d8bbec8b3cd51bd
- Size 842KB
- Sample260715-kvnnhsbv2s
- SHA256 2e2b8cc57ca0383a4ed4748b9f05492725e515398a2c74fb6d8bbec8b3cd51bd
- MD5 5a56faa3d71c3a278436ccf200e35fe2
- SHA1 4722a3202014d5686cb956b4a3e5c04faf8b3bb0
- SHA512 8189f655f05a485f9a818f1e84b373c4bb327219595e941a8c37771dbaa65ba1d01e69a7668c0a14aa91eaed4b44f28bab362c5ea43d0f09de87d77952e13b51
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io7:XLl7k/B2mGbUMoJnAhLrnAhUQQY
- TLSH T17005C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2e2b8cc57ca0383a4ed4748b9f05492725e515398a2c74fb6d8bbec8b3cd51bd.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2e2b8cc57ca0383a4ed4748b9f05492725e515398a2c74fb6d8bbec8b3cd51bd
- Size 842KB
- SHA256 2e2b8cc57ca0383a4ed4748b9f05492725e515398a2c74fb6d8bbec8b3cd51bd
- MD5 5a56faa3d71c3a278436ccf200e35fe2
- SHA1 4722a3202014d5686cb956b4a3e5c04faf8b3bb0
- SHA512 8189f655f05a485f9a818f1e84b373c4bb327219595e941a8c37771dbaa65ba1d01e69a7668c0a14aa91eaed4b44f28bab362c5ea43d0f09de87d77952e13b51
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io7:XLl7k/B2mGbUMoJnAhLrnAhUQQY
- TLSH T17005C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE