General
- Target 18b86e9550dbbfea4a7b650b60195eafd183e91eca1038ddd82c9a9ccaeccb7c
- Size 845KB
- Sample260720-j5ctbsa19j
- SHA256 18b86e9550dbbfea4a7b650b60195eafd183e91eca1038ddd82c9a9ccaeccb7c
- MD5 3bcd042aa0d005e8f6d5c66952bf4163
- SHA1 58589a9231ca39fccfea19e58d7d6ea7193b20a6
- SHA512 ed0a9e2cb50774cabd70d27ef5764ef26e806967f2b70b8a8f0b664abebaf5c27376feaf84f59891859da574de78639276e3ebcc68a1f8cd6040bd8bad6ec25c
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoM:XLl7k/B2mGbUMoJnAhLrnAhUQQz
- TLSH T1DE05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
18b86e9550dbbfea4a7b650b60195eafd183e91eca1038ddd82c9a9ccaeccb7c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 18b86e9550dbbfea4a7b650b60195eafd183e91eca1038ddd82c9a9ccaeccb7c
- Size 845KB
- SHA256 18b86e9550dbbfea4a7b650b60195eafd183e91eca1038ddd82c9a9ccaeccb7c
- MD5 3bcd042aa0d005e8f6d5c66952bf4163
- SHA1 58589a9231ca39fccfea19e58d7d6ea7193b20a6
- SHA512 ed0a9e2cb50774cabd70d27ef5764ef26e806967f2b70b8a8f0b664abebaf5c27376feaf84f59891859da574de78639276e3ebcc68a1f8cd6040bd8bad6ec25c
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoM:XLl7k/B2mGbUMoJnAhLrnAhUQQz
- TLSH T1DE05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE