General
- Target c1b5da07a5ea17df736a36fa6d228b33885c26d26d75b9ed0cf54cd2150a5f62
- Size 845KB
- Sample260802-lbag8agb62
- SHA256 c1b5da07a5ea17df736a36fa6d228b33885c26d26d75b9ed0cf54cd2150a5f62
- MD5 208369a2e232779e0bd93ea2e683f5f9
- SHA1 6c58822f45550f6e35bf0566a3cf38a5a20fba33
- SHA512 d4f9cfe69e41f6a925c7258d22e4b6809a5e37ae78cf55eec6da05f5ec26680b1ff25ad08442cedbc7a545f3fe471ce1ed02b3f28832bbb2dee2f6e210e52726
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoE:XLl7k/B2mGbUMoJnAhLrnAhUQQn
- TLSH T17C05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c1b5da07a5ea17df736a36fa6d228b33885c26d26d75b9ed0cf54cd2150a5f62.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target c1b5da07a5ea17df736a36fa6d228b33885c26d26d75b9ed0cf54cd2150a5f62
- Size 845KB
- SHA256 c1b5da07a5ea17df736a36fa6d228b33885c26d26d75b9ed0cf54cd2150a5f62
- MD5 208369a2e232779e0bd93ea2e683f5f9
- SHA1 6c58822f45550f6e35bf0566a3cf38a5a20fba33
- SHA512 d4f9cfe69e41f6a925c7258d22e4b6809a5e37ae78cf55eec6da05f5ec26680b1ff25ad08442cedbc7a545f3fe471ce1ed02b3f28832bbb2dee2f6e210e52726
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoE:XLl7k/B2mGbUMoJnAhLrnAhUQQn
- TLSH T17C05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE