General
- Target db2146e66fefa841e7c2ff61113cf8ac29682b50ee7c79230e770512e881107d
- Size 845KB
- Sample260801-exln2sdr4z
- SHA256 db2146e66fefa841e7c2ff61113cf8ac29682b50ee7c79230e770512e881107d
- MD5 35e6ea641ae0976aa9fdb48d82b32420
- SHA1 ee3d3c3c2cdd087e455070b969e01192802c3964
- SHA512 a98ca6ae1088a1ed900a16ff23ca91d28660b2ac70e57ced2417608179e25e6d8a704c215d4960d5847162ea5f9a4112e62e3d00de87176f26a997149f87df10
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoX:XLl7k/B2mGbUMoJnAhLrnAhUQQc
- TLSH T1B005CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
db2146e66fefa841e7c2ff61113cf8ac29682b50ee7c79230e770512e881107d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target db2146e66fefa841e7c2ff61113cf8ac29682b50ee7c79230e770512e881107d
- Size 845KB
- SHA256 db2146e66fefa841e7c2ff61113cf8ac29682b50ee7c79230e770512e881107d
- MD5 35e6ea641ae0976aa9fdb48d82b32420
- SHA1 ee3d3c3c2cdd087e455070b969e01192802c3964
- SHA512 a98ca6ae1088a1ed900a16ff23ca91d28660b2ac70e57ced2417608179e25e6d8a704c215d4960d5847162ea5f9a4112e62e3d00de87176f26a997149f87df10
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoX:XLl7k/B2mGbUMoJnAhLrnAhUQQc
- TLSH T1B005CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE