General
- Target 595b0e6da9cf40c093b7b0e1428d02442a3fed9b2c6b6dd15aff6895c57b7aa4
- Size 1.9MB
- Sample260727-jvdmwaytev
- SHA256 595b0e6da9cf40c093b7b0e1428d02442a3fed9b2c6b6dd15aff6895c57b7aa4
- MD5 4af0eb243a9823295b916897351eddce
- SHA1 3e2a0f1b599bc47cb36ca79628e2ee418637630b
- SHA512 f8d606393eaa82b77f2883accdb5c0a412115598904b094fdd3ae61840f0b15fd5e58c055de19b32dc8d987c70bf4ff1922748ce38c6c73b7008a47f9d183149
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuG:WylFHUv6ReIt0jSrOW88XG
- TLSH T1F6957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
595b0e6da9cf40c093b7b0e1428d02442a3fed9b2c6b6dd15aff6895c57b7aa4.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 595b0e6da9cf40c093b7b0e1428d02442a3fed9b2c6b6dd15aff6895c57b7aa4
- Size 1.9MB
- SHA256 595b0e6da9cf40c093b7b0e1428d02442a3fed9b2c6b6dd15aff6895c57b7aa4
- MD5 4af0eb243a9823295b916897351eddce
- SHA1 3e2a0f1b599bc47cb36ca79628e2ee418637630b
- SHA512 f8d606393eaa82b77f2883accdb5c0a412115598904b094fdd3ae61840f0b15fd5e58c055de19b32dc8d987c70bf4ff1922748ce38c6c73b7008a47f9d183149
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuG:WylFHUv6ReIt0jSrOW88XG
- TLSH T1F6957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE