General
- Target 28b41876929d93520decc7d1307589bf6dbb66ea0e2338130a327570001ffbc2
- Size 842KB
- Sample260730-kzhcasfr31
- SHA256 28b41876929d93520decc7d1307589bf6dbb66ea0e2338130a327570001ffbc2
- MD5 ca70a49245a4e557fb169f3dfb64fc24
- SHA1 2cfc871e44bc2f77881bc5aec64da9c63426ed7a
- SHA512 c3dd251eb8b090e2c902f07a6e70e8add7c1c71a1cd81ff01bdef410bb8cfc2256459f60f9f1e8faa7d1dfe4d05607650daf25f7c7ea34e61f5cc5f799a54b01
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoV:XLl7k/B2mGbUMoJnAhLrnAhUQQi
- TLSH T1D305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
28b41876929d93520decc7d1307589bf6dbb66ea0e2338130a327570001ffbc2.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 28b41876929d93520decc7d1307589bf6dbb66ea0e2338130a327570001ffbc2
- Size 842KB
- SHA256 28b41876929d93520decc7d1307589bf6dbb66ea0e2338130a327570001ffbc2
- MD5 ca70a49245a4e557fb169f3dfb64fc24
- SHA1 2cfc871e44bc2f77881bc5aec64da9c63426ed7a
- SHA512 c3dd251eb8b090e2c902f07a6e70e8add7c1c71a1cd81ff01bdef410bb8cfc2256459f60f9f1e8faa7d1dfe4d05607650daf25f7c7ea34e61f5cc5f799a54b01
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoV:XLl7k/B2mGbUMoJnAhLrnAhUQQi
- TLSH T1D305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE