General
- Target 478ffe60a2ae83ca3f1856342baa448681511af25c2df08eecbe027f3b680c7c
- Size 1.3MB
- Sample260730-kevrwsthle
- SHA256 478ffe60a2ae83ca3f1856342baa448681511af25c2df08eecbe027f3b680c7c
- MD5 c21039a8dd2c81792fef266f6c26a28f
- SHA1 337bb2e23c21fd5e93542b34afdba3a3defa1807
- SHA512 2206a1eb34103eda08eb5e1efc9a5c6bdb2f0f620d1ca41821647dd11c4525af148bdec15163402e16911ea559b4f13adff14d3cf6f50fef40d0744d8ab318d5
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nix:eylFHUv6ReIt0jSrO2
- TLSH T102557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
478ffe60a2ae83ca3f1856342baa448681511af25c2df08eecbe027f3b680c7c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 478ffe60a2ae83ca3f1856342baa448681511af25c2df08eecbe027f3b680c7c
- Size 1.3MB
- SHA256 478ffe60a2ae83ca3f1856342baa448681511af25c2df08eecbe027f3b680c7c
- MD5 c21039a8dd2c81792fef266f6c26a28f
- SHA1 337bb2e23c21fd5e93542b34afdba3a3defa1807
- SHA512 2206a1eb34103eda08eb5e1efc9a5c6bdb2f0f620d1ca41821647dd11c4525af148bdec15163402e16911ea559b4f13adff14d3cf6f50fef40d0744d8ab318d5
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nix:eylFHUv6ReIt0jSrO2
- TLSH T102557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE