General
- Target 49cab7c2ac0efcd30fe4f407e83ace2f3f94de2ed8c6cde42b6d5207c6add508
- Size 625KB
- Sample260803-k5ajmsfl3t
- SHA256 49cab7c2ac0efcd30fe4f407e83ace2f3f94de2ed8c6cde42b6d5207c6add508
- MD5 dbbb27f967e5e7b213ebe7ace94c693d
- SHA1 be987de73565ab4fcfad9ef49522e1211e648a78
- SHA512 70200c1f8997c5dca89afc331f47494cad201de4b8f9f13b72705bceb281108bc238d5af3eed87624c36617e5fc7e535fb89dc0218bbefeaa7bfdcc9c79e4407
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdN8:XLl7k/B2mGbUMoJ1
- TLSH T193D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
49cab7c2ac0efcd30fe4f407e83ace2f3f94de2ed8c6cde42b6d5207c6add508.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 49cab7c2ac0efcd30fe4f407e83ace2f3f94de2ed8c6cde42b6d5207c6add508
- Size 625KB
- SHA256 49cab7c2ac0efcd30fe4f407e83ace2f3f94de2ed8c6cde42b6d5207c6add508
- MD5 dbbb27f967e5e7b213ebe7ace94c693d
- SHA1 be987de73565ab4fcfad9ef49522e1211e648a78
- SHA512 70200c1f8997c5dca89afc331f47494cad201de4b8f9f13b72705bceb281108bc238d5af3eed87624c36617e5fc7e535fb89dc0218bbefeaa7bfdcc9c79e4407
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdN8:XLl7k/B2mGbUMoJ1
- TLSH T193D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE