General
- Target b48851a7921dca6815edbc58cff6d52b1631eff2614c9c59518d86f01c22c698
- Size 845KB
- Sample260730-gzfa6ach86
- SHA256 b48851a7921dca6815edbc58cff6d52b1631eff2614c9c59518d86f01c22c698
- MD5 b86c46cc7e7b7c92a4678c3783c06d43
- SHA1 10168325b2fcacc11face1d08489f49038473e86
- SHA512 baad4f79c97f209e12196b943fe9eadea5f109b81f78fd243c818153ed2e94e4a9fd3da3b28c6e8dfea469ab6f78eed17acdfa4d6b251b24493c8dcfc2d03ab7
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoT:XLl7k/B2mGbUMoJnAhLrnAhUQQk
- TLSH T1D505CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b48851a7921dca6815edbc58cff6d52b1631eff2614c9c59518d86f01c22c698.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b48851a7921dca6815edbc58cff6d52b1631eff2614c9c59518d86f01c22c698
- Size 845KB
- SHA256 b48851a7921dca6815edbc58cff6d52b1631eff2614c9c59518d86f01c22c698
- MD5 b86c46cc7e7b7c92a4678c3783c06d43
- SHA1 10168325b2fcacc11face1d08489f49038473e86
- SHA512 baad4f79c97f209e12196b943fe9eadea5f109b81f78fd243c818153ed2e94e4a9fd3da3b28c6e8dfea469ab6f78eed17acdfa4d6b251b24493c8dcfc2d03ab7
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoT:XLl7k/B2mGbUMoJnAhLrnAhUQQk
- TLSH T1D505CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE