General
- Target 6a65874eb8dc7115900b6cc4d0f9963629c006e7c1f4cb0c5610e442990e9021
- Size 842KB
- Sample260802-jazdvafa69
- SHA256 6a65874eb8dc7115900b6cc4d0f9963629c006e7c1f4cb0c5610e442990e9021
- MD5 2958ceda4c77120c7dc7284eee446fb1
- SHA1 4dfb2f4cb097bab14180db852e1b121c7da2ca88
- SHA512 50e85ac1ce18dd8b311ed91051799b44d7f5d75499dc39462eb84b51c6883b9ca05d94f9a4bf788ac2e6496098c6ce9c1406dee6eac4ed3101126ca958a04ac7
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io5:XLl7k/B2mGbUMoJnAhLrnAhUQQy
- TLSH T1E505C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6a65874eb8dc7115900b6cc4d0f9963629c006e7c1f4cb0c5610e442990e9021.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6a65874eb8dc7115900b6cc4d0f9963629c006e7c1f4cb0c5610e442990e9021
- Size 842KB
- SHA256 6a65874eb8dc7115900b6cc4d0f9963629c006e7c1f4cb0c5610e442990e9021
- MD5 2958ceda4c77120c7dc7284eee446fb1
- SHA1 4dfb2f4cb097bab14180db852e1b121c7da2ca88
- SHA512 50e85ac1ce18dd8b311ed91051799b44d7f5d75499dc39462eb84b51c6883b9ca05d94f9a4bf788ac2e6496098c6ce9c1406dee6eac4ed3101126ca958a04ac7
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io5:XLl7k/B2mGbUMoJnAhLrnAhUQQy
- TLSH T1E505C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE