General
- Target cb2ea530dc396a0a381a5f0f03d574283c9f967eadfbd1b74858b26cc8b6c259
- Size 580KB
- Sample260801-mbyeqasejd
- SHA256 cb2ea530dc396a0a381a5f0f03d574283c9f967eadfbd1b74858b26cc8b6c259
- MD5 b8552a7c0835331fe13753306599f663
- SHA1 e0868033315420b8868d639b98d1425095eb4e3b
- SHA512 40b0ff27c0999fe02375574af3b95d2bb77bae73ff691d55637ba5bc048fea038459f5f768d3d4bc06f478fdb1f4c443419385c523c625ee54505d995c6a8655
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4Jf:QptHFyrsy7t+TSQDsy777vxCRbapnf
- TLSH T1EFC4EF2A3E6D07A5D4CD4474AE0AB7589A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cb2ea530dc396a0a381a5f0f03d574283c9f967eadfbd1b74858b26cc8b6c259.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target cb2ea530dc396a0a381a5f0f03d574283c9f967eadfbd1b74858b26cc8b6c259
- Size 580KB
- SHA256 cb2ea530dc396a0a381a5f0f03d574283c9f967eadfbd1b74858b26cc8b6c259
- MD5 b8552a7c0835331fe13753306599f663
- SHA1 e0868033315420b8868d639b98d1425095eb4e3b
- SHA512 40b0ff27c0999fe02375574af3b95d2bb77bae73ff691d55637ba5bc048fea038459f5f768d3d4bc06f478fdb1f4c443419385c523c625ee54505d995c6a8655
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4Jf:QptHFyrsy7t+TSQDsy777vxCRbapnf
- TLSH T1EFC4EF2A3E6D07A5D4CD4474AE0AB7589A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE