General
- Target 563d61e46e5661abc9f4839e30020d460af44b255e921085cb92260eee65a770
- Size 1.4MB
- Sample260720-l4mcgsd18p
- SHA256 563d61e46e5661abc9f4839e30020d460af44b255e921085cb92260eee65a770
- MD5 2e02906ea6033af09ea3452209cd6f25
- SHA1 5a84dbcf529a29230b70a97e1a0a312face535eb
- SHA512 27b7dcb8cf63869d3b15063d9582167d111ccbba54a32fe898d9a24a2139d4fced0cb2052125c5c31970967ec122cc466aaad65a01320b47d3e6eeddf84e7c79
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkX:MLl7k/B2mGbUMoL+
- TLSH T16065F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
563d61e46e5661abc9f4839e30020d460af44b255e921085cb92260eee65a770.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 563d61e46e5661abc9f4839e30020d460af44b255e921085cb92260eee65a770
- Size 1.4MB
- SHA256 563d61e46e5661abc9f4839e30020d460af44b255e921085cb92260eee65a770
- MD5 2e02906ea6033af09ea3452209cd6f25
- SHA1 5a84dbcf529a29230b70a97e1a0a312face535eb
- SHA512 27b7dcb8cf63869d3b15063d9582167d111ccbba54a32fe898d9a24a2139d4fced0cb2052125c5c31970967ec122cc466aaad65a01320b47d3e6eeddf84e7c79
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkX:MLl7k/B2mGbUMoL+
- TLSH T16065F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE