General
- Target 6af4d13fb035e4ef45dc3efc8c8c230e45ba1d0d7ee6870f898a6dec62a3b7a4
- Size 628KB
- Sample260805-nmgrsawfpc
- SHA256 6af4d13fb035e4ef45dc3efc8c8c230e45ba1d0d7ee6870f898a6dec62a3b7a4
- MD5 d35c500d6d9c1cc2443cde150cececaa
- SHA1 176405b1c3c4dc1e0931a13667669f9d928ca8a0
- SHA512 7aca3c5af5d0f48ca0df2e22e78ffe6b09bc3bc7e1b6f7e85232ef5fd5cce61ab22f1127fb5cca636a495837ddc28f37f8bcf7ca4bca32bcb43a7fcff4d8837b
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKu:XLl7k/B2mGbUMoJnAhtKu
- TLSH T1A1D4E02C32AD5260E0EE4178B80EB552E671B8351731A5EF36E0D57D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6af4d13fb035e4ef45dc3efc8c8c230e45ba1d0d7ee6870f898a6dec62a3b7a4.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6af4d13fb035e4ef45dc3efc8c8c230e45ba1d0d7ee6870f898a6dec62a3b7a4
- Size 628KB
- SHA256 6af4d13fb035e4ef45dc3efc8c8c230e45ba1d0d7ee6870f898a6dec62a3b7a4
- MD5 d35c500d6d9c1cc2443cde150cececaa
- SHA1 176405b1c3c4dc1e0931a13667669f9d928ca8a0
- SHA512 7aca3c5af5d0f48ca0df2e22e78ffe6b09bc3bc7e1b6f7e85232ef5fd5cce61ab22f1127fb5cca636a495837ddc28f37f8bcf7ca4bca32bcb43a7fcff4d8837b
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKu:XLl7k/B2mGbUMoJnAhtKu
- TLSH T1A1D4E02C32AD5260E0EE4178B80EB552E671B8351731A5EF36E0D57D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE