General
- Target 2ef7f3974ca1ba7587b1bd3cd39de16c8c3b58b0fcb4da73b673db4e92898380
- Size 842KB
- Sample260804-nejw6sab88
- SHA256 2ef7f3974ca1ba7587b1bd3cd39de16c8c3b58b0fcb4da73b673db4e92898380
- MD5 20ccc01c2a9f428e777ad0dc592d90ee
- SHA1 8e389836c4c19eb268f5f945b55d7718d8690ae6
- SHA512 f2f846df61ad7d8d3a60ff417492f90c971bcdf649ce93f7730c88448bc28f9eb06a259b8f6963dc6056608e164336a98559d7569e851506197046a9a1268887
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io8:XLl7k/B2mGbUMoJnAhLrnAhUQQ3
- TLSH T19805C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2ef7f3974ca1ba7587b1bd3cd39de16c8c3b58b0fcb4da73b673db4e92898380.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2ef7f3974ca1ba7587b1bd3cd39de16c8c3b58b0fcb4da73b673db4e92898380
- Size 842KB
- SHA256 2ef7f3974ca1ba7587b1bd3cd39de16c8c3b58b0fcb4da73b673db4e92898380
- MD5 20ccc01c2a9f428e777ad0dc592d90ee
- SHA1 8e389836c4c19eb268f5f945b55d7718d8690ae6
- SHA512 f2f846df61ad7d8d3a60ff417492f90c971bcdf649ce93f7730c88448bc28f9eb06a259b8f6963dc6056608e164336a98559d7569e851506197046a9a1268887
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io8:XLl7k/B2mGbUMoJnAhLrnAhUQQ3
- TLSH T19805C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE