General
- Target 0ca325ab7620d7261a84fe20134c7ef40ba44e15be3dc4f62514f075e4318785
- Size 845KB
- Sample260731-lnjawsgb86
- SHA256 0ca325ab7620d7261a84fe20134c7ef40ba44e15be3dc4f62514f075e4318785
- MD5 defeae2d567b1f6795c091adb61fd17c
- SHA1 7cb388a34d09ac01152fc190b303964d63632728
- SHA512 19d4c767b3d8d90d05af98629ec58e23554d80776bfd07e9db403f1f652d4e857aab0b83c8c7b031315ac131629e10aeac404a20042b358e3f348539ced80f03
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoE:XLl7k/B2mGbUMoJnAhLrnAhUQQv
- TLSH T1F405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0ca325ab7620d7261a84fe20134c7ef40ba44e15be3dc4f62514f075e4318785.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0ca325ab7620d7261a84fe20134c7ef40ba44e15be3dc4f62514f075e4318785
- Size 845KB
- SHA256 0ca325ab7620d7261a84fe20134c7ef40ba44e15be3dc4f62514f075e4318785
- MD5 defeae2d567b1f6795c091adb61fd17c
- SHA1 7cb388a34d09ac01152fc190b303964d63632728
- SHA512 19d4c767b3d8d90d05af98629ec58e23554d80776bfd07e9db403f1f652d4e857aab0b83c8c7b031315ac131629e10aeac404a20042b358e3f348539ced80f03
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoE:XLl7k/B2mGbUMoJnAhLrnAhUQQv
- TLSH T1F405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE