General
- Target efa5d4d057917a3bd9c1ed1332ff3439ccdf14709737130d2b3d142a36e505ec
- Size 1.9MB
- Sample260716-mkd3faet9z
- SHA256 efa5d4d057917a3bd9c1ed1332ff3439ccdf14709737130d2b3d142a36e505ec
- MD5 13949d895f011c6e63c8768039deca73
- SHA1 c612d9cb0c45b5f948e03be9501d170edcdde1dd
- SHA512 8e1a7ae03c8730c81d5a2e9e5f1a0bea4364f1788c580a7ae374cff94cad1938a3c11b446b8457c5b4865f2d6395bd6ebe94874416255e25c25d317aca2cb1dd
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyy:WylFHUv6ReIt0jSrOW88Xl
- TLSH T1C3957C16769D81E1D05A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
efa5d4d057917a3bd9c1ed1332ff3439ccdf14709737130d2b3d142a36e505ec.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target efa5d4d057917a3bd9c1ed1332ff3439ccdf14709737130d2b3d142a36e505ec
- Size 1.9MB
- SHA256 efa5d4d057917a3bd9c1ed1332ff3439ccdf14709737130d2b3d142a36e505ec
- MD5 13949d895f011c6e63c8768039deca73
- SHA1 c612d9cb0c45b5f948e03be9501d170edcdde1dd
- SHA512 8e1a7ae03c8730c81d5a2e9e5f1a0bea4364f1788c580a7ae374cff94cad1938a3c11b446b8457c5b4865f2d6395bd6ebe94874416255e25c25d317aca2cb1dd
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyy:WylFHUv6ReIt0jSrOW88Xl
- TLSH T1C3957C16769D81E1D05A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE