General
- Target 22b1a4c2877b411ee4d79c1be093af70cfe4d4b84d9bd56dba504657053f0679
- Size 1.9MB
- Sample260727-hr2d4axfkf
- SHA256 22b1a4c2877b411ee4d79c1be093af70cfe4d4b84d9bd56dba504657053f0679
- MD5 05248bfecbf4761ec65d8b223c1abecf
- SHA1 77dfe2a55ed2e4c27205065dcb2c9143a7f1a4e0
- SHA512 d3cf1861b347a249bc25e4e26406584e1d31be93b964498d425b9c834346ff8787af7881ab39cd86cffbd1f4ee393fe4625584a7a199c2bdca55a3cf0c80b11b
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuj:WylFHUv6ReIt0jSrOW88Xj
- TLSH T194957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
22b1a4c2877b411ee4d79c1be093af70cfe4d4b84d9bd56dba504657053f0679.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 22b1a4c2877b411ee4d79c1be093af70cfe4d4b84d9bd56dba504657053f0679
- Size 1.9MB
- SHA256 22b1a4c2877b411ee4d79c1be093af70cfe4d4b84d9bd56dba504657053f0679
- MD5 05248bfecbf4761ec65d8b223c1abecf
- SHA1 77dfe2a55ed2e4c27205065dcb2c9143a7f1a4e0
- SHA512 d3cf1861b347a249bc25e4e26406584e1d31be93b964498d425b9c834346ff8787af7881ab39cd86cffbd1f4ee393fe4625584a7a199c2bdca55a3cf0c80b11b
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuj:WylFHUv6ReIt0jSrOW88Xj
- TLSH T194957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE