General
- Target 9a1769f195b56885f8ad5bf4df7c5ebc15c0b0d3845998592d16e2b062d3978c
- Size 1.9MB
- Sample260730-kafgeatgpg
- SHA256 9a1769f195b56885f8ad5bf4df7c5ebc15c0b0d3845998592d16e2b062d3978c
- MD5 9ca7df20f86c9d38522c629680fec4c2
- SHA1 8f7c305286b287250a34ec7cd2b8c432f3f0ffe9
- SHA512 83add3c2b8d38ced0c0afe276b7750b6514e3c5634c5fffeb36a8b1df5e4aa83ebf8fb479451e4c8b240bf37fc0d4489e6c4be55a20eb73ee2e21429458fc2ca
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuT:WylFHUv6ReIt0jSrOW88XT
- TLSH T103957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9a1769f195b56885f8ad5bf4df7c5ebc15c0b0d3845998592d16e2b062d3978c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9a1769f195b56885f8ad5bf4df7c5ebc15c0b0d3845998592d16e2b062d3978c
- Size 1.9MB
- SHA256 9a1769f195b56885f8ad5bf4df7c5ebc15c0b0d3845998592d16e2b062d3978c
- MD5 9ca7df20f86c9d38522c629680fec4c2
- SHA1 8f7c305286b287250a34ec7cd2b8c432f3f0ffe9
- SHA512 83add3c2b8d38ced0c0afe276b7750b6514e3c5634c5fffeb36a8b1df5e4aa83ebf8fb479451e4c8b240bf37fc0d4489e6c4be55a20eb73ee2e21429458fc2ca
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuT:WylFHUv6ReIt0jSrOW88XT
- TLSH T103957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE