General
- Target ef8d8b7a6cfae858455683fa8dbc8bc9e5290a1f6acac6544e3fc93d11330938
- Size 628KB
- Sample260804-2hptgshh36
- SHA256 ef8d8b7a6cfae858455683fa8dbc8bc9e5290a1f6acac6544e3fc93d11330938
- MD5 c0f7e3f500cea8a0b10dc5cc396a5924
- SHA1 136e616eea9fdc7353fccd8ce668a1c741a614c4
- SHA512 05d95691fd467708fce3dde1f3488f580b6d02fc6d2a8dd148b3f46af5fc55f3c1ea9560631a7e7afa9516c484c9f9bb748d9b9f33a1b791e50456664debcab1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJK7:XLl7k/B2mGbUMoJnAhtK7
- TLSH T1DBD4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ef8d8b7a6cfae858455683fa8dbc8bc9e5290a1f6acac6544e3fc93d11330938.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ef8d8b7a6cfae858455683fa8dbc8bc9e5290a1f6acac6544e3fc93d11330938
- Size 628KB
- SHA256 ef8d8b7a6cfae858455683fa8dbc8bc9e5290a1f6acac6544e3fc93d11330938
- MD5 c0f7e3f500cea8a0b10dc5cc396a5924
- SHA1 136e616eea9fdc7353fccd8ce668a1c741a614c4
- SHA512 05d95691fd467708fce3dde1f3488f580b6d02fc6d2a8dd148b3f46af5fc55f3c1ea9560631a7e7afa9516c484c9f9bb748d9b9f33a1b791e50456664debcab1
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJK7:XLl7k/B2mGbUMoJnAhtK7
- TLSH T1DBD4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE