General
- Target 56e6f43ad7aa409b7c4c405611777bf9d596516274826a0434ff473d18a85a6b
- Size 9.9MB
- Sample260715-rvs2kaew7j
- SHA256 56e6f43ad7aa409b7c4c405611777bf9d596516274826a0434ff473d18a85a6b
- MD5 6b48303afb44eeed07f3a722f3e531a2
- SHA1 2238e9748a7798395acf88c33d3b10806221ffe8
- SHA512 f10bc5c38dcc45c62fa86124c3f317a650e50f5b9c80cf2f0d020832b021e2828f2b2f91fa0a9f37a3a90c681792e12a72dca0978bb35c198802ef0a5cfd4f99
- SSDEEP 196608:JzQkDd8MH1FB79ETYU9IqU27oPFFZFDDd9hu/DY+28/+XuoStSdi09/W:2kd8MH1FBZ6YUhUW8ZF1HupkNv8MW
- TLSH T174A6335AE7A405FDD477E3B9CE524911E27FBC091320A79F23A9AE521F132818D3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
56e6f43ad7aa409b7c4c405611777bf9d596516274826a0434ff473d18a85a6b.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
56e6f43ad7aa409b7c4c405611777bf9d596516274826a0434ff473d18a85a6b.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 56e6f43ad7aa409b7c4c405611777bf9d596516274826a0434ff473d18a85a6b
- Size 9.9MB
- SHA256 56e6f43ad7aa409b7c4c405611777bf9d596516274826a0434ff473d18a85a6b
- MD5 6b48303afb44eeed07f3a722f3e531a2
- SHA1 2238e9748a7798395acf88c33d3b10806221ffe8
- SHA512 f10bc5c38dcc45c62fa86124c3f317a650e50f5b9c80cf2f0d020832b021e2828f2b2f91fa0a9f37a3a90c681792e12a72dca0978bb35c198802ef0a5cfd4f99
- SSDEEP 196608:JzQkDd8MH1FB79ETYU9IqU27oPFFZFDDd9hu/DY+28/+XuoStSdi09/W:2kd8MH1FBZ6YUhUW8ZF1HupkNv8MW
- TLSH T174A6335AE7A405FDD477E3B9CE524911E27FBC091320A79F23A9AE521F132818D3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE