General
- Target 161a6f6c9c0fbf69f73bcf06f30d98491deb58cb4a4e20200163fbfa25c6b54c
- Size 628KB
- Sample260719-g17rssdt6k
- SHA256 161a6f6c9c0fbf69f73bcf06f30d98491deb58cb4a4e20200163fbfa25c6b54c
- MD5 896e4e35c207a54867f545cacc497357
- SHA1 c0b19de4eefb21dcd2d21bf3a4a1836e89476a52
- SHA512 2eeeab399c37fc15402a904c6ee349c42ef9cc51cadcd166fd5c107f5c28b0770f7369c69a2f6e06efff96bc7bc1ba812295d773e5b5771ae4129eb5fd5700c4
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKQ:XLl7k/B2mGbUMoJnAhtKQ
- TLSH T11AD4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
161a6f6c9c0fbf69f73bcf06f30d98491deb58cb4a4e20200163fbfa25c6b54c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 161a6f6c9c0fbf69f73bcf06f30d98491deb58cb4a4e20200163fbfa25c6b54c
- Size 628KB
- SHA256 161a6f6c9c0fbf69f73bcf06f30d98491deb58cb4a4e20200163fbfa25c6b54c
- MD5 896e4e35c207a54867f545cacc497357
- SHA1 c0b19de4eefb21dcd2d21bf3a4a1836e89476a52
- SHA512 2eeeab399c37fc15402a904c6ee349c42ef9cc51cadcd166fd5c107f5c28b0770f7369c69a2f6e06efff96bc7bc1ba812295d773e5b5771ae4129eb5fd5700c4
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKQ:XLl7k/B2mGbUMoJnAhtKQ
- TLSH T11AD4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE