General
- Target 9ccd97d6b68657e2d18b7dc67e8a9932b2ed5e8ce13b99f235bafe925d3d87d7
- Size 845KB
- Sample260729-gttllawcmf
- SHA256 9ccd97d6b68657e2d18b7dc67e8a9932b2ed5e8ce13b99f235bafe925d3d87d7
- MD5 517d41d0c9b6dd829ade090bf2f5bc27
- SHA1 2aac0b4864bd395ee065c850669416d4c95915bc
- SHA512 52bea362d62a3a3261f1b60aa8c1992b82c048ba69927c29cb88ffcd9995839ae07bb8784852674a3e0d4edc863824bc3810380f4631fc0c79a7e8845e926b71
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io+:XLl7k/B2mGbUMoJnAhLrnAhUQQB
- TLSH T14905CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9ccd97d6b68657e2d18b7dc67e8a9932b2ed5e8ce13b99f235bafe925d3d87d7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9ccd97d6b68657e2d18b7dc67e8a9932b2ed5e8ce13b99f235bafe925d3d87d7
- Size 845KB
- SHA256 9ccd97d6b68657e2d18b7dc67e8a9932b2ed5e8ce13b99f235bafe925d3d87d7
- MD5 517d41d0c9b6dd829ade090bf2f5bc27
- SHA1 2aac0b4864bd395ee065c850669416d4c95915bc
- SHA512 52bea362d62a3a3261f1b60aa8c1992b82c048ba69927c29cb88ffcd9995839ae07bb8784852674a3e0d4edc863824bc3810380f4631fc0c79a7e8845e926b71
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io+:XLl7k/B2mGbUMoJnAhLrnAhUQQB
- TLSH T14905CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE