General
- Target a56f051b767c1a2e17da1c643e1fac86d36bb85cfda7664d596997f2ce4a5c89
- Size 1.9MB
- Sample260718-j2l8lagw71
- SHA256 a56f051b767c1a2e17da1c643e1fac86d36bb85cfda7664d596997f2ce4a5c89
- MD5 4bd80bd254090514d4d2a441c97520bb
- SHA1 46f7fe0032f0c2466d1a4fe844fcaa94bae9cc6e
- SHA512 57ea09573c1bcbd175b6fe40acc68114b451df27c0f3a185cbdd9389560aa28da2f01e8b8ed14b7552f56694a3525445f0f118631becdefed20dc29837142f9f
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuy6:WylFHUv6ReIt0jSrOW88XV
- TLSH T1DD957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a56f051b767c1a2e17da1c643e1fac86d36bb85cfda7664d596997f2ce4a5c89.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target a56f051b767c1a2e17da1c643e1fac86d36bb85cfda7664d596997f2ce4a5c89
- Size 1.9MB
- SHA256 a56f051b767c1a2e17da1c643e1fac86d36bb85cfda7664d596997f2ce4a5c89
- MD5 4bd80bd254090514d4d2a441c97520bb
- SHA1 46f7fe0032f0c2466d1a4fe844fcaa94bae9cc6e
- SHA512 57ea09573c1bcbd175b6fe40acc68114b451df27c0f3a185cbdd9389560aa28da2f01e8b8ed14b7552f56694a3525445f0f118631becdefed20dc29837142f9f
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuy6:WylFHUv6ReIt0jSrOW88XV
- TLSH T1DD957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE