General
- Target 36c2d5eb60863c54666776a58105feffd0e3d05e67adab4d5625e932b51a3ade
- Size 1.4MB
- Sample260715-rlf1mset2m
- SHA256 36c2d5eb60863c54666776a58105feffd0e3d05e67adab4d5625e932b51a3ade
- MD5 a4d0f7e871cf9e2c1cfab1383f0f02aa
- SHA1 f16d3246d32dc458b90d002e40963a1a0fbd197e
- SHA512 0261d167f227668915c6b3ccff6f28176fb467f6004b9369253c5eb3ad05232ec3d4a01884ee9ac4c1ca56998382a9c3e2b6046f717621bad57975e6393d2bb3
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75K:MLl7k/B2mGbUMoLnAh4
- TLSH T19D65E02D32AD5250E4EE5078B80E7691E6727835173295EF36E0C63D9B33BE87639E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
36c2d5eb60863c54666776a58105feffd0e3d05e67adab4d5625e932b51a3ade.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 36c2d5eb60863c54666776a58105feffd0e3d05e67adab4d5625e932b51a3ade
- Size 1.4MB
- SHA256 36c2d5eb60863c54666776a58105feffd0e3d05e67adab4d5625e932b51a3ade
- MD5 a4d0f7e871cf9e2c1cfab1383f0f02aa
- SHA1 f16d3246d32dc458b90d002e40963a1a0fbd197e
- SHA512 0261d167f227668915c6b3ccff6f28176fb467f6004b9369253c5eb3ad05232ec3d4a01884ee9ac4c1ca56998382a9c3e2b6046f717621bad57975e6393d2bb3
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75K:MLl7k/B2mGbUMoLnAh4
- TLSH T19D65E02D32AD5250E4EE5078B80E7691E6727835173295EF36E0C63D9B33BE87639E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE