General
- Target 645732f9b950269e32b1be0b7f26e7c3619d7414080a9f02c0da9aa50486019a
- Size 686KB
- Sample260718-h2banaby5l
- SHA256 645732f9b950269e32b1be0b7f26e7c3619d7414080a9f02c0da9aa50486019a
- MD5 2dac6987bb240501887c36d1e2d0a0b5
- SHA1 2a7ec63624a79d1ba6f85eef2bfeef8dd6b52674
- SHA512 3cb61aae1b628af8b0822febccf768ad905d1b5bd79e9c909539e81d77ea7ad59c4a4ae354573eec96af4849566390bf959b29560218cd3e38493be84d681c52
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJU:XLl7k/B2mGbUMoJnAhLrU
- TLSH T1B2E4D02D32AD1261E4AE9078E84BB251D67278351732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
645732f9b950269e32b1be0b7f26e7c3619d7414080a9f02c0da9aa50486019a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 645732f9b950269e32b1be0b7f26e7c3619d7414080a9f02c0da9aa50486019a
- Size 686KB
- SHA256 645732f9b950269e32b1be0b7f26e7c3619d7414080a9f02c0da9aa50486019a
- MD5 2dac6987bb240501887c36d1e2d0a0b5
- SHA1 2a7ec63624a79d1ba6f85eef2bfeef8dd6b52674
- SHA512 3cb61aae1b628af8b0822febccf768ad905d1b5bd79e9c909539e81d77ea7ad59c4a4ae354573eec96af4849566390bf959b29560218cd3e38493be84d681c52
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJU:XLl7k/B2mGbUMoJnAhLrU
- TLSH T1B2E4D02D32AD1261E4AE9078E84BB251D67278351732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE