General
- Target 4ef3b6e6d1a0d9dfe6f38e782e530c85d33d073c7f430ee6247c19283d0375bd
- Size 628KB
- Sample260720-h45maacv51
- SHA256 4ef3b6e6d1a0d9dfe6f38e782e530c85d33d073c7f430ee6247c19283d0375bd
- MD5 4acdb89746904caf18d1af15f15c3d3f
- SHA1 82e6539d36b2e24ed1965137edc467c13371e509
- SHA512 e665fa5d881afba0516adb8a74b7b9d6bbddd07a25363182219c44857d3f3c719dc6e476763172f2bfe67c89ca201b77fea21a49fb3d2205418e1226f47c7095
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKD:XLl7k/B2mGbUMoJnAhtKD
- TLSH T15ED4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4ef3b6e6d1a0d9dfe6f38e782e530c85d33d073c7f430ee6247c19283d0375bd.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4ef3b6e6d1a0d9dfe6f38e782e530c85d33d073c7f430ee6247c19283d0375bd
- Size 628KB
- SHA256 4ef3b6e6d1a0d9dfe6f38e782e530c85d33d073c7f430ee6247c19283d0375bd
- MD5 4acdb89746904caf18d1af15f15c3d3f
- SHA1 82e6539d36b2e24ed1965137edc467c13371e509
- SHA512 e665fa5d881afba0516adb8a74b7b9d6bbddd07a25363182219c44857d3f3c719dc6e476763172f2bfe67c89ca201b77fea21a49fb3d2205418e1226f47c7095
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKD:XLl7k/B2mGbUMoJnAhtKD
- TLSH T15ED4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE