General
- Target 28c82db1c508eef17ddefb47bb94d24ee48a293b99402f111904397a6e31d9b8
- Size 1.4MB
- Sample260716-hdmnsaex6m
- SHA256 28c82db1c508eef17ddefb47bb94d24ee48a293b99402f111904397a6e31d9b8
- MD5 a0477dc8f9864d20b7e3213577193ef8
- SHA1 5eb1406f5a03d028eb6b270fb21120dc08f53da7
- SHA512 b3046e2922c5ea36649fc666377dda8ec24d91b152edb4102d86fd95152540d483d1fce94878372f8b6b2f7e84146d52e5354cd8e0a5dbd4ae9c1847e1fe8dcb
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75Q:MLl7k/B2mGbUMoLnAhy
- TLSH T15965E02D32AD5250E4EE5078B84E7691E6727835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
28c82db1c508eef17ddefb47bb94d24ee48a293b99402f111904397a6e31d9b8.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 28c82db1c508eef17ddefb47bb94d24ee48a293b99402f111904397a6e31d9b8
- Size 1.4MB
- SHA256 28c82db1c508eef17ddefb47bb94d24ee48a293b99402f111904397a6e31d9b8
- MD5 a0477dc8f9864d20b7e3213577193ef8
- SHA1 5eb1406f5a03d028eb6b270fb21120dc08f53da7
- SHA512 b3046e2922c5ea36649fc666377dda8ec24d91b152edb4102d86fd95152540d483d1fce94878372f8b6b2f7e84146d52e5354cd8e0a5dbd4ae9c1847e1fe8dcb
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75Q:MLl7k/B2mGbUMoLnAhy
- TLSH T15965E02D32AD5250E4EE5078B84E7691E6727835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE