General
- Target fd06be49503f4dabfffaf1de55152d165779a5d88d911430804e610d32f4b09d
- Size 842KB
- Sample260804-penqssah29
- SHA256 fd06be49503f4dabfffaf1de55152d165779a5d88d911430804e610d32f4b09d
- MD5 70ae36a6f70f54beb1ae21a938c879ad
- SHA1 ef36f2f2e976fff4b54ac0a312a7ebfef215c59b
- SHA512 531532143fb178ba88a29f0cdaf6298700a6f9fdb065c5caa84400fc26b5b7fcbbb07cb82c6769bdc98ee881893b69a6cd2c434c41792f2740fa1514240e9168
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoF:XLl7k/B2mGbUMoJnAhLrnAhUQQS
- TLSH T1AE05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
fd06be49503f4dabfffaf1de55152d165779a5d88d911430804e610d32f4b09d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target fd06be49503f4dabfffaf1de55152d165779a5d88d911430804e610d32f4b09d
- Size 842KB
- SHA256 fd06be49503f4dabfffaf1de55152d165779a5d88d911430804e610d32f4b09d
- MD5 70ae36a6f70f54beb1ae21a938c879ad
- SHA1 ef36f2f2e976fff4b54ac0a312a7ebfef215c59b
- SHA512 531532143fb178ba88a29f0cdaf6298700a6f9fdb065c5caa84400fc26b5b7fcbbb07cb82c6769bdc98ee881893b69a6cd2c434c41792f2740fa1514240e9168
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoF:XLl7k/B2mGbUMoJnAhLrnAhUQQS
- TLSH T1AE05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE