General
- Target c0bb6915d27702a4aca98a9dfc5f82df8ef0b1ca33e3f3073d37a40f8f05c1b4
- Size 580KB
- Sample260804-pwy8vseq7z
- SHA256 c0bb6915d27702a4aca98a9dfc5f82df8ef0b1ca33e3f3073d37a40f8f05c1b4
- MD5 82355f074fce4b3464fcbbadc47fe3d2
- SHA1 a6e4cacedfc828a7dc50d52f7399e17006e3c857
- SHA512 98bffca3c6a60b099cb9cc292a032bfbceef95bf8ee5d72348f3326028f3081ce51b5890d2f6e929b2613b87d2e92eb44c42639e7b61d20fab98a5b3f7b85f58
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JO:QptHFyrsy7t+TSQDsy777vxCRbapnO
- TLSH T159C4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c0bb6915d27702a4aca98a9dfc5f82df8ef0b1ca33e3f3073d37a40f8f05c1b4.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target c0bb6915d27702a4aca98a9dfc5f82df8ef0b1ca33e3f3073d37a40f8f05c1b4
- Size 580KB
- SHA256 c0bb6915d27702a4aca98a9dfc5f82df8ef0b1ca33e3f3073d37a40f8f05c1b4
- MD5 82355f074fce4b3464fcbbadc47fe3d2
- SHA1 a6e4cacedfc828a7dc50d52f7399e17006e3c857
- SHA512 98bffca3c6a60b099cb9cc292a032bfbceef95bf8ee5d72348f3326028f3081ce51b5890d2f6e929b2613b87d2e92eb44c42639e7b61d20fab98a5b3f7b85f58
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JO:QptHFyrsy7t+TSQDsy777vxCRbapnO
- TLSH T159C4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE