General
- Target 0656af50f3d73805bfc036dda78be2fba4a8e4884cfa749d5328795e644b702d
- Size 842KB
- Sample260720-gl8qjsax6z
- SHA256 0656af50f3d73805bfc036dda78be2fba4a8e4884cfa749d5328795e644b702d
- MD5 6a0cea3b85e3f8e3f48a6546f47c00aa
- SHA1 71223dc5f436013dc10d11c9923c232a4b89b8a4
- SHA512 095d22fcf0d71e8566aba280190ffa35d8a724a0ce6e4c6c10b2e09b54e28874f79894bac887320b6d07735362cd58e0e2aff91b60fe35fff7a201f6cc7d83c1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io0:XLl7k/B2mGbUMoJnAhLrnAhUQQz
- TLSH T12305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0656af50f3d73805bfc036dda78be2fba4a8e4884cfa749d5328795e644b702d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0656af50f3d73805bfc036dda78be2fba4a8e4884cfa749d5328795e644b702d
- Size 842KB
- SHA256 0656af50f3d73805bfc036dda78be2fba4a8e4884cfa749d5328795e644b702d
- MD5 6a0cea3b85e3f8e3f48a6546f47c00aa
- SHA1 71223dc5f436013dc10d11c9923c232a4b89b8a4
- SHA512 095d22fcf0d71e8566aba280190ffa35d8a724a0ce6e4c6c10b2e09b54e28874f79894bac887320b6d07735362cd58e0e2aff91b60fe35fff7a201f6cc7d83c1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io0:XLl7k/B2mGbUMoJnAhLrnAhUQQz
- TLSH T12305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE