General
- Target b92bf0a35430de0f5947ae1da90be640833d0a02a1b3a77debb1ea19ed227194
- Size 845KB
- Sample260729-e1257stgrd
- SHA256 b92bf0a35430de0f5947ae1da90be640833d0a02a1b3a77debb1ea19ed227194
- MD5 e4992366a2689d3868b505866b45cb70
- SHA1 34bfc783834ba635c57b62c98e0f7931362fc9e2
- SHA512 ed4b5b7cc0ea1888ebd393013af3599aa2ff53a2df50f5812a50b833a7d7c0ad96b68f94d4de8c7c3eb7d11d6ffc83865eac64a225eab3d5970ee804c74a0e19
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io3:XLl7k/B2mGbUMoJnAhLrnAhUQQ8
- TLSH T1ED05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b92bf0a35430de0f5947ae1da90be640833d0a02a1b3a77debb1ea19ed227194.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b92bf0a35430de0f5947ae1da90be640833d0a02a1b3a77debb1ea19ed227194
- Size 845KB
- SHA256 b92bf0a35430de0f5947ae1da90be640833d0a02a1b3a77debb1ea19ed227194
- MD5 e4992366a2689d3868b505866b45cb70
- SHA1 34bfc783834ba635c57b62c98e0f7931362fc9e2
- SHA512 ed4b5b7cc0ea1888ebd393013af3599aa2ff53a2df50f5812a50b833a7d7c0ad96b68f94d4de8c7c3eb7d11d6ffc83865eac64a225eab3d5970ee804c74a0e19
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io3:XLl7k/B2mGbUMoJnAhLrnAhUQQ8
- TLSH T1ED05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE