General
- Target bf894e0e0ff2ba186b29c723fe8d8aab347a23e7fb01f47c4e147150ea211c6e
- Size 845KB
- Sample260729-j649zaygrc
- SHA256 bf894e0e0ff2ba186b29c723fe8d8aab347a23e7fb01f47c4e147150ea211c6e
- MD5 9769d6e0e60ac681996b93f2fdfdb4d4
- SHA1 d1e8bd75637e8ac5c9b64fd62e10852fbd1e6604
- SHA512 9858001594a17bce2deb60b718d8de775546a47f64c76536bafeab3438871553ad182a8ca6acf9f07b00388412f6ea7df1642192be433522aa72af0204d1d66a
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoD:XLl7k/B2mGbUMoJnAhLrnAhUQQE
- TLSH T19205CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bf894e0e0ff2ba186b29c723fe8d8aab347a23e7fb01f47c4e147150ea211c6e.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bf894e0e0ff2ba186b29c723fe8d8aab347a23e7fb01f47c4e147150ea211c6e
- Size 845KB
- SHA256 bf894e0e0ff2ba186b29c723fe8d8aab347a23e7fb01f47c4e147150ea211c6e
- MD5 9769d6e0e60ac681996b93f2fdfdb4d4
- SHA1 d1e8bd75637e8ac5c9b64fd62e10852fbd1e6604
- SHA512 9858001594a17bce2deb60b718d8de775546a47f64c76536bafeab3438871553ad182a8ca6acf9f07b00388412f6ea7df1642192be433522aa72af0204d1d66a
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoD:XLl7k/B2mGbUMoJnAhLrnAhUQQE
- TLSH T19205CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE