General
- Target ef47a1ff38202cd6afe6c55313def4312da7fe835c371d6902697d8eb34bc0b1
- Size 1.4MB
- Sample260805-ke728atajf
- SHA256 ef47a1ff38202cd6afe6c55313def4312da7fe835c371d6902697d8eb34bc0b1
- MD5 e87c80a7263bc4d8226ad3e20392ccb1
- SHA1 f423ca1d88cf277a4fae66d5ff6c063e60ddc869
- SHA512 ed6c02cb3c40c7f939fca4ebec7e5f8e6b07345af97e16f3be4bc72dc439b818c4745844ff0d7619efc54784dc418bbe1a73c35a7fdc17d4c0286cf7cbfa05ca
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHq9:MLl7k/B2mGbUMoLv
- TLSH T19B65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ef47a1ff38202cd6afe6c55313def4312da7fe835c371d6902697d8eb34bc0b1.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ef47a1ff38202cd6afe6c55313def4312da7fe835c371d6902697d8eb34bc0b1
- Size 1.4MB
- SHA256 ef47a1ff38202cd6afe6c55313def4312da7fe835c371d6902697d8eb34bc0b1
- MD5 e87c80a7263bc4d8226ad3e20392ccb1
- SHA1 f423ca1d88cf277a4fae66d5ff6c063e60ddc869
- SHA512 ed6c02cb3c40c7f939fca4ebec7e5f8e6b07345af97e16f3be4bc72dc439b818c4745844ff0d7619efc54784dc418bbe1a73c35a7fdc17d4c0286cf7cbfa05ca
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHq9:MLl7k/B2mGbUMoLv
- TLSH T19B65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE