General
- Target nHcUser.exe
- Size 3.5MB
- Sample260730-ap29lsyzbt
- SHA256 e61c0fc3006d1175102ef16a60ed12e1314b6dc2349958af1efd76731df583ef
- MD5 1fa0a4b82fbaeaba9cb77c94db9c2546
- SHA1 fa5fc896b97dbf8797c409d5016c7d8cef20a345
- SHA512 382cef0306d9f5998a0af8362a8ad44198ac54a4f201b9a336ab7dfcd647932f91aaa508065e45e957908b0c27975211b543f78cf414288dbf6ea0e3eb21235a
- SSDEEP 98304:F5mmGnq76b6x9rPE/yA9bwwlQOhc/LKNppDE8:qmGnqmb4VE/nRwwlnhcjKRDF
- TLSH T10006009AB660147FECDD7A357D230B3B01530BC9E1AA1FDB8D53A12213383A6F945D26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nHcUser.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target nHcUser.exe
- Size 3.5MB
- SHA256 e61c0fc3006d1175102ef16a60ed12e1314b6dc2349958af1efd76731df583ef
- MD5 1fa0a4b82fbaeaba9cb77c94db9c2546
- SHA1 fa5fc896b97dbf8797c409d5016c7d8cef20a345
- SHA512 382cef0306d9f5998a0af8362a8ad44198ac54a4f201b9a336ab7dfcd647932f91aaa508065e45e957908b0c27975211b543f78cf414288dbf6ea0e3eb21235a
- SSDEEP 98304:F5mmGnq76b6x9rPE/yA9bwwlQOhc/LKNppDE8:qmGnqmb4VE/nRwwlnhcjKRDF
- TLSH T10006009AB660147FECDD7A357D230B3B01530BC9E1AA1FDB8D53A12213383A6F945D26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory