General
- Target 2e9bb6025c90096689e9bebca60a92aae6d21269fff23da0f243b85cae561599
- Size 1.9MB
- Sample260722-jdnrhs1dma
- SHA256 2e9bb6025c90096689e9bebca60a92aae6d21269fff23da0f243b85cae561599
- MD5 ed7081c4aa5884915d57395f38a9824e
- SHA1 15ee3d6790c145e996e669dbf5b6cd15fdaa78d7
- SHA512 20ccbeb5bc375e202e05d099d323763592fc7e5d2e6f2a55a53273a87c9889259a42f573316581871678494d7a4d53180ad60645afe7cff576a959ea85065b2a
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQu5:WylFHUv6ReIt0jSrOW88X5
- TLSH T189957C16769D81E1D05A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2e9bb6025c90096689e9bebca60a92aae6d21269fff23da0f243b85cae561599.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2e9bb6025c90096689e9bebca60a92aae6d21269fff23da0f243b85cae561599
- Size 1.9MB
- SHA256 2e9bb6025c90096689e9bebca60a92aae6d21269fff23da0f243b85cae561599
- MD5 ed7081c4aa5884915d57395f38a9824e
- SHA1 15ee3d6790c145e996e669dbf5b6cd15fdaa78d7
- SHA512 20ccbeb5bc375e202e05d099d323763592fc7e5d2e6f2a55a53273a87c9889259a42f573316581871678494d7a4d53180ad60645afe7cff576a959ea85065b2a
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQu5:WylFHUv6ReIt0jSrOW88X5
- TLSH T189957C16769D81E1D05A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE