General
- Target 94b420c1a34a934c01df261ba81755c6aadc544c8a878b8ec1465a57b59072c3
- Size 2.9MB
- Sample260801-t1ahhsde95
- SHA256 94b420c1a34a934c01df261ba81755c6aadc544c8a878b8ec1465a57b59072c3
- MD5 767afea69a16b9a74af4313df0ecf4d2
- SHA1 61cc3706df83915f732cc924b82dc1005dd4f223
- SHA512 c138631be6e4dd9858039950b278f47ebc77181dd10de02a43d3a20759ba2409b4eb47ac0afdb882eb0cc810e40b029f3a422518bd051271fa4934397e8d83d1
- SSDEEP 49152:lkA3ZOpw/kG1HeClG4boK0gQ1aSvvKEY2lqjUD93FneujMJz:SXzG1HNlG40g2fviE3qQBpj
- TLSH T149E56C33E14184A1F11926B572B21738BEB9AB7549358997FFF8DCF42E262318BD610C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
94b420c1a34a934c01df261ba81755c6aadc544c8a878b8ec1465a57b59072c3.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 94b420c1a34a934c01df261ba81755c6aadc544c8a878b8ec1465a57b59072c3
- Size 2.9MB
- SHA256 94b420c1a34a934c01df261ba81755c6aadc544c8a878b8ec1465a57b59072c3
- MD5 767afea69a16b9a74af4313df0ecf4d2
- SHA1 61cc3706df83915f732cc924b82dc1005dd4f223
- SHA512 c138631be6e4dd9858039950b278f47ebc77181dd10de02a43d3a20759ba2409b4eb47ac0afdb882eb0cc810e40b029f3a422518bd051271fa4934397e8d83d1
- SSDEEP 49152:lkA3ZOpw/kG1HeClG4boK0gQ1aSvvKEY2lqjUD93FneujMJz:SXzG1HNlG40g2fviE3qQBpj
- TLSH T149E56C33E14184A1F11926B572B21738BEB9AB7549358997FFF8DCF42E262318BD610C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1