General
- Target c234cf7be8632181501f32c19c1a1c56f795797c5f86bcc572a34b3fc55af572
- Size 1.4MB
- Sample260801-navswatcqa
- SHA256 c234cf7be8632181501f32c19c1a1c56f795797c5f86bcc572a34b3fc55af572
- MD5 ca26a3507f9d02e92129455e22edd105
- SHA1 27497e41a84310a01683f1e1fc47ea790f0a3b8a
- SHA512 f798cc070c91a638b15128d4f70145a94a7d0f736ffe08c9cd1f08c7a12cda1fba9dc5431c15c0cee07af1740d120aa4a09ae4af9d0e63d5f4813f03c8b5f842
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkn:MLl7k/B2mGbUMoLG
- TLSH T10665F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c234cf7be8632181501f32c19c1a1c56f795797c5f86bcc572a34b3fc55af572.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target c234cf7be8632181501f32c19c1a1c56f795797c5f86bcc572a34b3fc55af572
- Size 1.4MB
- SHA256 c234cf7be8632181501f32c19c1a1c56f795797c5f86bcc572a34b3fc55af572
- MD5 ca26a3507f9d02e92129455e22edd105
- SHA1 27497e41a84310a01683f1e1fc47ea790f0a3b8a
- SHA512 f798cc070c91a638b15128d4f70145a94a7d0f736ffe08c9cd1f08c7a12cda1fba9dc5431c15c0cee07af1740d120aa4a09ae4af9d0e63d5f4813f03c8b5f842
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkn:MLl7k/B2mGbUMoLG
- TLSH T10665F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE