General
- Target cb6340db0b40d7fba4916a40b8e2bb6f86f244c3295e9a33878e1af1e14e93c7
- Size 845KB
- Sample260718-ls5dxsax7w
- SHA256 cb6340db0b40d7fba4916a40b8e2bb6f86f244c3295e9a33878e1af1e14e93c7
- MD5 0577aed3eb4e443b1fdad9a2a4f9a712
- SHA1 818ab29b7e1fa18977935114e9cde5cedaa6fe2e
- SHA512 d6b42a9ed86cb54bc09307b28128b4071f29bc540f6386cfb0632ffdd50005f21bb828ca48ab6b46e85e7834b52c41c1e9b64a7a325eff2649dd26aef68e4ae7
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoD:XLl7k/B2mGbUMoJnAhLrnAhUQQQ
- TLSH T1BB05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cb6340db0b40d7fba4916a40b8e2bb6f86f244c3295e9a33878e1af1e14e93c7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target cb6340db0b40d7fba4916a40b8e2bb6f86f244c3295e9a33878e1af1e14e93c7
- Size 845KB
- SHA256 cb6340db0b40d7fba4916a40b8e2bb6f86f244c3295e9a33878e1af1e14e93c7
- MD5 0577aed3eb4e443b1fdad9a2a4f9a712
- SHA1 818ab29b7e1fa18977935114e9cde5cedaa6fe2e
- SHA512 d6b42a9ed86cb54bc09307b28128b4071f29bc540f6386cfb0632ffdd50005f21bb828ca48ab6b46e85e7834b52c41c1e9b64a7a325eff2649dd26aef68e4ae7
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoD:XLl7k/B2mGbUMoJnAhLrnAhUQQQ
- TLSH T1BB05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE