General
- Target 3e245a6efae7f7079e07c6fc19f0e204cb92a254fb567737b947ecde7b5354dc
- Size 1.2MB
- Sample260717-hw2wesdx3m
- SHA256 3e245a6efae7f7079e07c6fc19f0e204cb92a254fb567737b947ecde7b5354dc
- MD5 5151a88666e81c4226c82a66e99109b7
- SHA1 7606770214929f7b83a077f0d438255fe4ed62e2
- SHA512 fdb9d57e443d774cf7b64f9f6c3df6fadb69e5ce8e01d470c4f9b5140f5588c60aeaea6dfe594e74c4d9b58d023d535682bb9d849365d18f6de610024b85fb95
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHV:VptHFyrsy7t+TSQDsy777vxCRbaV
- TLSH T1D4551229776C8B2AC0CD1D32B51EFEFC6A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3e245a6efae7f7079e07c6fc19f0e204cb92a254fb567737b947ecde7b5354dc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 3e245a6efae7f7079e07c6fc19f0e204cb92a254fb567737b947ecde7b5354dc
- Size 1.2MB
- SHA256 3e245a6efae7f7079e07c6fc19f0e204cb92a254fb567737b947ecde7b5354dc
- MD5 5151a88666e81c4226c82a66e99109b7
- SHA1 7606770214929f7b83a077f0d438255fe4ed62e2
- SHA512 fdb9d57e443d774cf7b64f9f6c3df6fadb69e5ce8e01d470c4f9b5140f5588c60aeaea6dfe594e74c4d9b58d023d535682bb9d849365d18f6de610024b85fb95
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHV:VptHFyrsy7t+TSQDsy777vxCRbaV
- TLSH T1D4551229776C8B2AC0CD1D32B51EFEFC6A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE