General
- Target 0fffc91e1fc92f5e2936e646bb857a21fdbdcfcc09def01ff7cdda5968d48234
- Size 686KB
- Sample260805-khaacsytev
- SHA256 0fffc91e1fc92f5e2936e646bb857a21fdbdcfcc09def01ff7cdda5968d48234
- MD5 e6cc14230a3c03250f0865177ff40662
- SHA1 f5931304ee437f0db496438720edeb0f14a8746a
- SHA512 17e52a33687bc889e5107d5335d3e078080df730b1f8277d8f85515c67007f7ff1c41e099c45e41c132c841477d7a3e841439f3fe05f66267e83b49faf42d744
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJk:XLl7k/B2mGbUMoJnAhLrk
- TLSH T1FEE4D02D32AD1261E4AE9078E84BB151D67278351732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0fffc91e1fc92f5e2936e646bb857a21fdbdcfcc09def01ff7cdda5968d48234.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0fffc91e1fc92f5e2936e646bb857a21fdbdcfcc09def01ff7cdda5968d48234
- Size 686KB
- SHA256 0fffc91e1fc92f5e2936e646bb857a21fdbdcfcc09def01ff7cdda5968d48234
- MD5 e6cc14230a3c03250f0865177ff40662
- SHA1 f5931304ee437f0db496438720edeb0f14a8746a
- SHA512 17e52a33687bc889e5107d5335d3e078080df730b1f8277d8f85515c67007f7ff1c41e099c45e41c132c841477d7a3e841439f3fe05f66267e83b49faf42d744
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJk:XLl7k/B2mGbUMoJnAhLrk
- TLSH T1FEE4D02D32AD1261E4AE9078E84BB151D67278351732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE