General
- Target 5c32d3f1de492e5b7e7db6b3362b845c83e9cdbaf4977cd0975b8564f7a8e06b
- Size 12.0MB
- Sample260720-h2lfmahx2l
- SHA256 5c32d3f1de492e5b7e7db6b3362b845c83e9cdbaf4977cd0975b8564f7a8e06b
- MD5 198d3e36825da76d46686ec71ccafbb5
- SHA1 b7a032d2e62b633cb4e8b5ded4aac43335d99f1c
- SHA512 e974c272684d10ce305ebf85c6a8d140aa491875b332b1239e65cb9096204040a3855e557139db183853346212b021f2d58c4131df0e3b42bb3484388de8c46c
- SSDEEP 393216:3H7gLkRixMWM1iKa2hHHW0L+Kh8sIXUAK:3+kRixM5aoW++KhGUAK
- TLSH T12FD633525C1597A7E4604E3A2A79ACE570872F25BE6DFFD2FC99FB9252730C1B602003
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5c32d3f1de492e5b7e7db6b3362b845c83e9cdbaf4977cd0975b8564f7a8e06b.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 5c32d3f1de492e5b7e7db6b3362b845c83e9cdbaf4977cd0975b8564f7a8e06b
- Size 12.0MB
- SHA256 5c32d3f1de492e5b7e7db6b3362b845c83e9cdbaf4977cd0975b8564f7a8e06b
- MD5 198d3e36825da76d46686ec71ccafbb5
- SHA1 b7a032d2e62b633cb4e8b5ded4aac43335d99f1c
- SHA512 e974c272684d10ce305ebf85c6a8d140aa491875b332b1239e65cb9096204040a3855e557139db183853346212b021f2d58c4131df0e3b42bb3484388de8c46c
- SSDEEP 393216:3H7gLkRixMWM1iKa2hHHW0L+Kh8sIXUAK:3+kRixM5aoW++KhGUAK
- TLSH T12FD633525C1597A7E4604E3A2A79ACE570872F25BE6DFFD2FC99FB9252730C1B602003
- MD5 SHA1 SHA512 SSDEEP TLSH
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL