General
- Target 4b89be62cdf4ddd084e5e40dd87f3a35835300b5776d7862d2bae45a34af49a2
- Size 581KB
- Sample260802-kndjzaygmd
- SHA256 4b89be62cdf4ddd084e5e40dd87f3a35835300b5776d7862d2bae45a34af49a2
- MD5 2369c8eab8d0aa8428592c1cdb2ea1c8
- SHA1 c48b9d52326d6016855d0b4c3d287a1d5a0fd330
- SHA512 b09cbf27c2a8b5cc63c1ba339ac125c25b426d38b1df35006333a6075f0cf46f7f4b977f0b2789da125cbe6851db8d2467e06609b381b1a857dd3bb34af17d34
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4Je:QptHFyrsy7t+TSQDsy777vxCRbapne
- TLSH T1E9C4EF2A3E6D07A5D4CD4474AE0AB7589A206DA13737CEF731A3B169CA36FD03E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4b89be62cdf4ddd084e5e40dd87f3a35835300b5776d7862d2bae45a34af49a2.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4b89be62cdf4ddd084e5e40dd87f3a35835300b5776d7862d2bae45a34af49a2
- Size 581KB
- SHA256 4b89be62cdf4ddd084e5e40dd87f3a35835300b5776d7862d2bae45a34af49a2
- MD5 2369c8eab8d0aa8428592c1cdb2ea1c8
- SHA1 c48b9d52326d6016855d0b4c3d287a1d5a0fd330
- SHA512 b09cbf27c2a8b5cc63c1ba339ac125c25b426d38b1df35006333a6075f0cf46f7f4b977f0b2789da125cbe6851db8d2467e06609b381b1a857dd3bb34af17d34
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4Je:QptHFyrsy7t+TSQDsy777vxCRbapne
- TLSH T1E9C4EF2A3E6D07A5D4CD4474AE0AB7589A206DA13737CEF731A3B169CA36FD03E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE