General
- Target 2e36bb2cde8cadc39d3b63d0384b7707c4e28444e2c64c562cb5820717d34e5f
- Size 580KB
- Sample260729-j73grscl6v
- SHA256 2e36bb2cde8cadc39d3b63d0384b7707c4e28444e2c64c562cb5820717d34e5f
- MD5 364faa378bc6b6a2977bc0ed58890344
- SHA1 236dd623083a443d92659bee5ac1a5d3eb9605dc
- SHA512 a5be0d4f5c4d801ca08b35c274d63fcc3b5d85f758ecc8a24b99cb5730f486485e6fead1f16043747130b8ea997f7e4dfa453ff63642e6d4ed2f77eb1e4109a5
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JA:QptHFyrsy7t+TSQDsy777vxCRbapnA
- TLSH T119C4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2e36bb2cde8cadc39d3b63d0384b7707c4e28444e2c64c562cb5820717d34e5f.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2e36bb2cde8cadc39d3b63d0384b7707c4e28444e2c64c562cb5820717d34e5f
- Size 580KB
- SHA256 2e36bb2cde8cadc39d3b63d0384b7707c4e28444e2c64c562cb5820717d34e5f
- MD5 364faa378bc6b6a2977bc0ed58890344
- SHA1 236dd623083a443d92659bee5ac1a5d3eb9605dc
- SHA512 a5be0d4f5c4d801ca08b35c274d63fcc3b5d85f758ecc8a24b99cb5730f486485e6fead1f16043747130b8ea997f7e4dfa453ff63642e6d4ed2f77eb1e4109a5
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JA:QptHFyrsy7t+TSQDsy777vxCRbapnA
- TLSH T119C4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE