General
- Target fa0300b27b9f49a64b5d69fc96a90a5f6c4f34cc99be5d3f56e0281651ba7d81
- Size 686KB
- Sample260728-ksggessglc
- SHA256 fa0300b27b9f49a64b5d69fc96a90a5f6c4f34cc99be5d3f56e0281651ba7d81
- MD5 974b4d31d27ae94a0cd82344e8859633
- SHA1 70a48c16406b0ffbab513c71ef4389396e367bf5
- SHA512 a66cf89a14777310a4aa54a21b0c74719fc70cded264ef9d8e50896a4665fecdae9f7f88ee2796ec8f2c68a50680ab9a7338ada384cb7357fdf44d08d40a4990
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJ6:XLl7k/B2mGbUMoJnAhLr6
- TLSH T1EBE4D02D32AD1261E4AE9078E84BB151D67278351732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
fa0300b27b9f49a64b5d69fc96a90a5f6c4f34cc99be5d3f56e0281651ba7d81.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target fa0300b27b9f49a64b5d69fc96a90a5f6c4f34cc99be5d3f56e0281651ba7d81
- Size 686KB
- SHA256 fa0300b27b9f49a64b5d69fc96a90a5f6c4f34cc99be5d3f56e0281651ba7d81
- MD5 974b4d31d27ae94a0cd82344e8859633
- SHA1 70a48c16406b0ffbab513c71ef4389396e367bf5
- SHA512 a66cf89a14777310a4aa54a21b0c74719fc70cded264ef9d8e50896a4665fecdae9f7f88ee2796ec8f2c68a50680ab9a7338ada384cb7357fdf44d08d40a4990
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJ6:XLl7k/B2mGbUMoJnAhLr6
- TLSH T1EBE4D02D32AD1261E4AE9078E84BB151D67278351732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE