General
- Target 5a6fa0792f6e9128aa1f8e4a0b2fd342cfe0b2dcc89cddfa8a091d721b4b10ee
- Size 1.3MB
- Sample260731-jraf2syvdz
- SHA256 5a6fa0792f6e9128aa1f8e4a0b2fd342cfe0b2dcc89cddfa8a091d721b4b10ee
- MD5 d6fc5244d482706515ff4cace4e8af19
- SHA1 ae04f98ac7443d317da89f29f3b5ead848fe0d5d
- SHA512 c6c24c096ac1aedf1de4cfb9901d86bd48dd6fe0766fcf3a9a17d1e4c1dcc2fbab379bad2357c1dcafee240beaa6f83adcfb07b88d99eb5e6ddd9561ac8f2ec2
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEni:WylFHUv6ReIt0jSrO7
- TLSH T1BA557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5a6fa0792f6e9128aa1f8e4a0b2fd342cfe0b2dcc89cddfa8a091d721b4b10ee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5a6fa0792f6e9128aa1f8e4a0b2fd342cfe0b2dcc89cddfa8a091d721b4b10ee
- Size 1.3MB
- SHA256 5a6fa0792f6e9128aa1f8e4a0b2fd342cfe0b2dcc89cddfa8a091d721b4b10ee
- MD5 d6fc5244d482706515ff4cace4e8af19
- SHA1 ae04f98ac7443d317da89f29f3b5ead848fe0d5d
- SHA512 c6c24c096ac1aedf1de4cfb9901d86bd48dd6fe0766fcf3a9a17d1e4c1dcc2fbab379bad2357c1dcafee240beaa6f83adcfb07b88d99eb5e6ddd9561ac8f2ec2
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEni:WylFHUv6ReIt0jSrO7
- TLSH T1BA557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE