General
- Target 5b3a868f6b601ba796df75116da8241abed9f7399d7dcaa3b8331ce09203268d
- Size 842KB
- Sample260729-hefa4axbrg
- SHA256 5b3a868f6b601ba796df75116da8241abed9f7399d7dcaa3b8331ce09203268d
- MD5 94f830aec4ef8b0df0b28c492a90dd25
- SHA1 1be24df4b411cdf0ad00e98dbfc799a97a0b438a
- SHA512 e0ddb60a5c52323c96292a1a16ae7d4e2fd62672320cf021daea6a8497fdc7879d23513481ae5de82670b671d893c93c4ab202102ba04796adc84f252ce5b4e1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io0:XLl7k/B2mGbUMoJnAhLrnAhUQQH
- TLSH T1B705C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5b3a868f6b601ba796df75116da8241abed9f7399d7dcaa3b8331ce09203268d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5b3a868f6b601ba796df75116da8241abed9f7399d7dcaa3b8331ce09203268d
- Size 842KB
- SHA256 5b3a868f6b601ba796df75116da8241abed9f7399d7dcaa3b8331ce09203268d
- MD5 94f830aec4ef8b0df0b28c492a90dd25
- SHA1 1be24df4b411cdf0ad00e98dbfc799a97a0b438a
- SHA512 e0ddb60a5c52323c96292a1a16ae7d4e2fd62672320cf021daea6a8497fdc7879d23513481ae5de82670b671d893c93c4ab202102ba04796adc84f252ce5b4e1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io0:XLl7k/B2mGbUMoJnAhLrnAhUQQH
- TLSH T1B705C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE