General
- Target 141238aab33f50d26c262d04624e89f95621f6d53b263b0911ba9836bcb41df5
- Size 845KB
- Sample260804-ncbssavsbs
- SHA256 141238aab33f50d26c262d04624e89f95621f6d53b263b0911ba9836bcb41df5
- MD5 47bdc20146735ffa9af235f8e6df7c8f
- SHA1 55d1640df1189e851c862901dd3e9f321d629d80
- SHA512 f3b89aa7d2968ff86612444a3b06171625669d8939149d8e9f8127ae60c5d7c696b5af797091c854f46369aa289ba339a3cf7de0a5792b22787e6cc81b40d8b5
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io6:XLl7k/B2mGbUMoJnAhLrnAhUQQB
- TLSH T15D05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
141238aab33f50d26c262d04624e89f95621f6d53b263b0911ba9836bcb41df5.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 141238aab33f50d26c262d04624e89f95621f6d53b263b0911ba9836bcb41df5
- Size 845KB
- SHA256 141238aab33f50d26c262d04624e89f95621f6d53b263b0911ba9836bcb41df5
- MD5 47bdc20146735ffa9af235f8e6df7c8f
- SHA1 55d1640df1189e851c862901dd3e9f321d629d80
- SHA512 f3b89aa7d2968ff86612444a3b06171625669d8939149d8e9f8127ae60c5d7c696b5af797091c854f46369aa289ba339a3cf7de0a5792b22787e6cc81b40d8b5
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io6:XLl7k/B2mGbUMoJnAhLrnAhUQQB
- TLSH T15D05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE