General
- Target 799e206d18afc0e0e01e185482ea64adf157532395cb9ccb9a95ea5792b0d306
- Size 1.4MB
- Sample260716-k4fz2ahs5l
- SHA256 799e206d18afc0e0e01e185482ea64adf157532395cb9ccb9a95ea5792b0d306
- MD5 439540ddb5be584b16e775abf59b0629
- SHA1 86e32c0e85cc07610696b385f105f9b02e6e63cf
- SHA512 bcdf5227332d0a6c71833e3a36de9756f03c68c773b7214c9b371e080f6f884817fc76b24b0fac82e88f1c708c3c6eabc5f6be38f5e6ef563daf032fdb0a5e55
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkm:MLl7k/B2mGbUMoLv
- TLSH T1E865F01D325D8361E0EE4038B80FB691E636BC651B71D5EB3AB0D63D9A33BE43635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
799e206d18afc0e0e01e185482ea64adf157532395cb9ccb9a95ea5792b0d306.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
799e206d18afc0e0e01e185482ea64adf157532395cb9ccb9a95ea5792b0d306.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 799e206d18afc0e0e01e185482ea64adf157532395cb9ccb9a95ea5792b0d306
- Size 1.4MB
- SHA256 799e206d18afc0e0e01e185482ea64adf157532395cb9ccb9a95ea5792b0d306
- MD5 439540ddb5be584b16e775abf59b0629
- SHA1 86e32c0e85cc07610696b385f105f9b02e6e63cf
- SHA512 bcdf5227332d0a6c71833e3a36de9756f03c68c773b7214c9b371e080f6f884817fc76b24b0fac82e88f1c708c3c6eabc5f6be38f5e6ef563daf032fdb0a5e55
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkm:MLl7k/B2mGbUMoLv
- TLSH T1E865F01D325D8361E0EE4038B80FB691E636BC651B71D5EB3AB0D63D9A33BE43635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE