General
- Target 6e49c2e79aab4af237bc4f69850e2a06e6473d21bb925fceb2857c7bb61ae6e8
- Size 842KB
- Sample260803-lm39nsteqa
- SHA256 6e49c2e79aab4af237bc4f69850e2a06e6473d21bb925fceb2857c7bb61ae6e8
- MD5 de1e60ba10a0ebea8a5703b543c0abbf
- SHA1 40545e5a1d77ad0d3eaf6f887bcc84251d106dfe
- SHA512 9efcbc5d3aeffb153b695934aa07cc4e145277dce57e96324463a7a6f1feb4c52c5aa1cf74c062ef56e0c601c795285b87430c48ec6856b77d679a18fe3a39a5
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioe:XLl7k/B2mGbUMoJnAhLrnAhUQQR
- TLSH T1BA05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6e49c2e79aab4af237bc4f69850e2a06e6473d21bb925fceb2857c7bb61ae6e8.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6e49c2e79aab4af237bc4f69850e2a06e6473d21bb925fceb2857c7bb61ae6e8
- Size 842KB
- SHA256 6e49c2e79aab4af237bc4f69850e2a06e6473d21bb925fceb2857c7bb61ae6e8
- MD5 de1e60ba10a0ebea8a5703b543c0abbf
- SHA1 40545e5a1d77ad0d3eaf6f887bcc84251d106dfe
- SHA512 9efcbc5d3aeffb153b695934aa07cc4e145277dce57e96324463a7a6f1feb4c52c5aa1cf74c062ef56e0c601c795285b87430c48ec6856b77d679a18fe3a39a5
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioe:XLl7k/B2mGbUMoJnAhLrnAhUQQR
- TLSH T1BA05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE