General
- Target 04b98a1b17d7a75307c0c73ebd8aee283c31492be00d7b9362b4364ec1b1a039
- Size 845KB
- Sample260803-ewbgpaybpg
- SHA256 04b98a1b17d7a75307c0c73ebd8aee283c31492be00d7b9362b4364ec1b1a039
- MD5 400e7e373b1f7fa336a163e499f0ebb1
- SHA1 1884c9a121a54d6d3c72cd34f45b2c9a31a7b37a
- SHA512 dcbef20368446d7c14b415f10a4759e3faa588a72962adcb61f8d845f26a98aad58f75bc31165b4e9b16b702d9d58126d5a2cbfb813893ae74878c0be12ea3a2
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioz:XLl7k/B2mGbUMoJnAhLrnAhUQQc
- TLSH T1CE05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
04b98a1b17d7a75307c0c73ebd8aee283c31492be00d7b9362b4364ec1b1a039.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 04b98a1b17d7a75307c0c73ebd8aee283c31492be00d7b9362b4364ec1b1a039
- Size 845KB
- SHA256 04b98a1b17d7a75307c0c73ebd8aee283c31492be00d7b9362b4364ec1b1a039
- MD5 400e7e373b1f7fa336a163e499f0ebb1
- SHA1 1884c9a121a54d6d3c72cd34f45b2c9a31a7b37a
- SHA512 dcbef20368446d7c14b415f10a4759e3faa588a72962adcb61f8d845f26a98aad58f75bc31165b4e9b16b702d9d58126d5a2cbfb813893ae74878c0be12ea3a2
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioz:XLl7k/B2mGbUMoJnAhLrnAhUQQc
- TLSH T1CE05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE