General
- Target 5891f861f81bf8fe3ce99a7fd39e29a3e3cb4c8ef1300a28de27b0ed48137886
- Size 1.4MB
- Sample260801-l6a28sha64
- SHA256 5891f861f81bf8fe3ce99a7fd39e29a3e3cb4c8ef1300a28de27b0ed48137886
- MD5 1f11d44e6ad317feb1260bf9fd1646fc
- SHA1 2c5b618a4ba12b4d368be4c3a74503f7ae232c11
- SHA512 d89c4dbafe72bcc975720648771a5eb7a2a48fd9fecb3c6590e2446b58787dc22222736e61e86d05a15a320cb9df343b0556e4ef40f0996c29aa4706b408a944
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJk2:MLl7k/B2mGbUMoLr
- TLSH T17465F01D325D8321E0EE4038BC0FB691E636BC651B71D5EB3AB0D67D6A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5891f861f81bf8fe3ce99a7fd39e29a3e3cb4c8ef1300a28de27b0ed48137886.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5891f861f81bf8fe3ce99a7fd39e29a3e3cb4c8ef1300a28de27b0ed48137886
- Size 1.4MB
- SHA256 5891f861f81bf8fe3ce99a7fd39e29a3e3cb4c8ef1300a28de27b0ed48137886
- MD5 1f11d44e6ad317feb1260bf9fd1646fc
- SHA1 2c5b618a4ba12b4d368be4c3a74503f7ae232c11
- SHA512 d89c4dbafe72bcc975720648771a5eb7a2a48fd9fecb3c6590e2446b58787dc22222736e61e86d05a15a320cb9df343b0556e4ef40f0996c29aa4706b408a944
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJk2:MLl7k/B2mGbUMoLr
- TLSH T17465F01D325D8321E0EE4038BC0FB691E636BC651B71D5EB3AB0D67D6A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE