General
- Target 41c4fef350c2418e20678f6139aeb035e1ba6893723d6075e5e116edf576a7ba
- Size 845KB
- Sample260730-h2wllatake
- SHA256 41c4fef350c2418e20678f6139aeb035e1ba6893723d6075e5e116edf576a7ba
- MD5 192a1fa770483c81547eab309f0f55b8
- SHA1 fe7d57329764f91395b1332ccb8a2ab94b50252b
- SHA512 6819e3e2cf2a17e0a7a9339a8d2494f9b3fc562bb0171725032440f89749ddaf430ab6ceff8d6cfc8355b6166b23f0995373cc6e5cbf78341c0976c81a1882d0
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoK:XLl7k/B2mGbUMoJnAhLrnAhUQQp
- TLSH T1CF05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
41c4fef350c2418e20678f6139aeb035e1ba6893723d6075e5e116edf576a7ba.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 41c4fef350c2418e20678f6139aeb035e1ba6893723d6075e5e116edf576a7ba
- Size 845KB
- SHA256 41c4fef350c2418e20678f6139aeb035e1ba6893723d6075e5e116edf576a7ba
- MD5 192a1fa770483c81547eab309f0f55b8
- SHA1 fe7d57329764f91395b1332ccb8a2ab94b50252b
- SHA512 6819e3e2cf2a17e0a7a9339a8d2494f9b3fc562bb0171725032440f89749ddaf430ab6ceff8d6cfc8355b6166b23f0995373cc6e5cbf78341c0976c81a1882d0
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoK:XLl7k/B2mGbUMoJnAhLrnAhUQQp
- TLSH T1CF05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE