General
- Target df48d2436b91e025993a821e57c56425a2ab83070143c03c3150eb05ee5572f9
- Size 845KB
- Sample260720-h396dacv3w
- SHA256 df48d2436b91e025993a821e57c56425a2ab83070143c03c3150eb05ee5572f9
- MD5 4c0d072577035e09aa122a011f380346
- SHA1 a1bd1b0703efe3fe2d6b0fd4c921ab3df7d0a774
- SHA512 bcaff222d723d1ef5372c37c249956d96c1b6d2cd5347ba6d38ae31861b089bfd7f44a95d853bd403848eba2474cfbc2cde0644c89bf558007b761a0b9e297b0
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iod:XLl7k/B2mGbUMoJnAhLrnAhUQQu
- TLSH T1A505CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
df48d2436b91e025993a821e57c56425a2ab83070143c03c3150eb05ee5572f9.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target df48d2436b91e025993a821e57c56425a2ab83070143c03c3150eb05ee5572f9
- Size 845KB
- SHA256 df48d2436b91e025993a821e57c56425a2ab83070143c03c3150eb05ee5572f9
- MD5 4c0d072577035e09aa122a011f380346
- SHA1 a1bd1b0703efe3fe2d6b0fd4c921ab3df7d0a774
- SHA512 bcaff222d723d1ef5372c37c249956d96c1b6d2cd5347ba6d38ae31861b089bfd7f44a95d853bd403848eba2474cfbc2cde0644c89bf558007b761a0b9e297b0
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iod:XLl7k/B2mGbUMoJnAhLrnAhUQQu
- TLSH T1A505CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE