General
- Target 164cbd6522017a6b931f88a6cd197dfbfee6aaaf982c7a3a49f1f845e2aefaf2
- Size 626KB
- Sample260802-ljy6jszfpd
- SHA256 164cbd6522017a6b931f88a6cd197dfbfee6aaaf982c7a3a49f1f845e2aefaf2
- MD5 8e69aa5abbc87554992045b2f2113828
- SHA1 17e740570641e9106002c6be27ad7621fdc61978
- SHA512 f7f78a6c79d7191ae6b88ba6834b42a2f58c4dfddc143c0f3fbd14fb0bfc812d55a21a4906f1b04ab95e105ac1a3760efe2f016c84e1516dd6e1ab704c2e2a20
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdNd:XLl7k/B2mGbUMoJg
- TLSH T19BD4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
164cbd6522017a6b931f88a6cd197dfbfee6aaaf982c7a3a49f1f845e2aefaf2.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 164cbd6522017a6b931f88a6cd197dfbfee6aaaf982c7a3a49f1f845e2aefaf2
- Size 626KB
- SHA256 164cbd6522017a6b931f88a6cd197dfbfee6aaaf982c7a3a49f1f845e2aefaf2
- MD5 8e69aa5abbc87554992045b2f2113828
- SHA1 17e740570641e9106002c6be27ad7621fdc61978
- SHA512 f7f78a6c79d7191ae6b88ba6834b42a2f58c4dfddc143c0f3fbd14fb0bfc812d55a21a4906f1b04ab95e105ac1a3760efe2f016c84e1516dd6e1ab704c2e2a20
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdNd:XLl7k/B2mGbUMoJg
- TLSH T19BD4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE