General
- Target f3923551b434d5c2e411f9716bc3f63f570eac44adb6a05bdf990416e23e2db4
- Size 842KB
- Sample260728-knbelssfpd
- SHA256 f3923551b434d5c2e411f9716bc3f63f570eac44adb6a05bdf990416e23e2db4
- MD5 7e8ddd5f9bf4fbb7700c94761ea35a70
- SHA1 6985522fd4accd9dbe8bad04898f83d79fb23c04
- SHA512 1860545f8a9f13f1ede372271d8ffaf8a2f41f2930312bbdc7686f351d6333128bc76c8a21c11445dc61d783d5323e5cc0433c1ccdaae26b8aae099910d1afb6
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoY:XLl7k/B2mGbUMoJnAhLrnAhUQQ3
- TLSH T11005C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f3923551b434d5c2e411f9716bc3f63f570eac44adb6a05bdf990416e23e2db4.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target f3923551b434d5c2e411f9716bc3f63f570eac44adb6a05bdf990416e23e2db4
- Size 842KB
- SHA256 f3923551b434d5c2e411f9716bc3f63f570eac44adb6a05bdf990416e23e2db4
- MD5 7e8ddd5f9bf4fbb7700c94761ea35a70
- SHA1 6985522fd4accd9dbe8bad04898f83d79fb23c04
- SHA512 1860545f8a9f13f1ede372271d8ffaf8a2f41f2930312bbdc7686f351d6333128bc76c8a21c11445dc61d783d5323e5cc0433c1ccdaae26b8aae099910d1afb6
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoY:XLl7k/B2mGbUMoJnAhLrnAhUQQ3
- TLSH T11005C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE