General
- Target ShowMyPC3160.exe
- Size 2.0MB
- Sample260721-wwhdnsdf98
- SHA256 47c496ef71b8b680db070709980af073c7854072051a8977e541331240a06839
- MD5 ad1bc8037bd26cf6c4b63ef53561c938
- SHA1 ebfe0e470456c9be61ed63cff39a270b0e5ac673
- SHA512 88ae2453a09068f66b55e2e27c147d74193898189b59def2e71a7dd77807187c68aca78badf49dd2b16277d5028f47390447b4f1635b342be68406104863c494
- SSDEEP 49152:UelPRriykVyEPaPwA40qlg/mMLVd5ZeJoR/w:UePYhsn4Ll3KeWR/w
- TLSH T140A533213D84DA56E927927110AFD772C77AFF232580CA4B6F42BBEF5BF21250868315
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ShowMyPC3160.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ShowMyPC3160.exe
- Size 2.0MB
- SHA256 47c496ef71b8b680db070709980af073c7854072051a8977e541331240a06839
- MD5 ad1bc8037bd26cf6c4b63ef53561c938
- SHA1 ebfe0e470456c9be61ed63cff39a270b0e5ac673
- SHA512 88ae2453a09068f66b55e2e27c147d74193898189b59def2e71a7dd77807187c68aca78badf49dd2b16277d5028f47390447b4f1635b342be68406104863c494
- SSDEEP 49152:UelPRriykVyEPaPwA40qlg/mMLVd5ZeJoR/w:UePYhsn4Ll3KeWR/w
- TLSH T140A533213D84DA56E927927110AFD772C77AFF232580CA4B6F42BBEF5BF21250868315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL