General
- Target 2f1dfb8734084bc673ccfdc44b4956c13682d8c17cc78fa16e0a4d1f4121c75a
- Size 841KB
- Sample260730-hmt48awvev
- SHA256 2f1dfb8734084bc673ccfdc44b4956c13682d8c17cc78fa16e0a4d1f4121c75a
- MD5 660c89d4e35f679d034338e82856e504
- SHA1 c5879bc5cb221edcc40d98dbb282e39b6cc07a89
- SHA512 60ff3b0109de10e030e43fe84d631e66e2bef4375d1dd9bd1c55b65747f9fb92aed6ddc47203a4d2caa8812b018834ba31f018fe005f2de8379cc1d480e596b5
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iox:XLl7k/B2mGbUMoJnAhLrnAhUQQ2
- TLSH T1B305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2f1dfb8734084bc673ccfdc44b4956c13682d8c17cc78fa16e0a4d1f4121c75a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2f1dfb8734084bc673ccfdc44b4956c13682d8c17cc78fa16e0a4d1f4121c75a
- Size 841KB
- SHA256 2f1dfb8734084bc673ccfdc44b4956c13682d8c17cc78fa16e0a4d1f4121c75a
- MD5 660c89d4e35f679d034338e82856e504
- SHA1 c5879bc5cb221edcc40d98dbb282e39b6cc07a89
- SHA512 60ff3b0109de10e030e43fe84d631e66e2bef4375d1dd9bd1c55b65747f9fb92aed6ddc47203a4d2caa8812b018834ba31f018fe005f2de8379cc1d480e596b5
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iox:XLl7k/B2mGbUMoJnAhLrnAhUQQ2
- TLSH T1B305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE