General
- Target 2eb7c2a77db602d307791fa17a36c7d44420a1da852c9b54b7db9b0bbc2f3fb4
- Size 1.1MB
- Sample260805-nnn79awfpg
- SHA256 2eb7c2a77db602d307791fa17a36c7d44420a1da852c9b54b7db9b0bbc2f3fb4
- MD5 587c6d2754f5687be87534e8129c7a18
- SHA1 9ca77212eebe2ab0f3168dcbb3de5e09ab9fc349
- SHA512 624e0433c785de0f801eaa302debc2f693d3b7d5ed7ebcad4cbebb8722ccd92422acb2f56c71272ee196929950ead342e3416003ca203ce17d1a4be9b4f8344c
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnr:AylFHUv6ReIt0jSrOI
- TLSH T133357E02B94DC2B1D18C14702D6F73366D349A5A3B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2eb7c2a77db602d307791fa17a36c7d44420a1da852c9b54b7db9b0bbc2f3fb4.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2eb7c2a77db602d307791fa17a36c7d44420a1da852c9b54b7db9b0bbc2f3fb4.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2eb7c2a77db602d307791fa17a36c7d44420a1da852c9b54b7db9b0bbc2f3fb4
- Size 1.1MB
- SHA256 2eb7c2a77db602d307791fa17a36c7d44420a1da852c9b54b7db9b0bbc2f3fb4
- MD5 587c6d2754f5687be87534e8129c7a18
- SHA1 9ca77212eebe2ab0f3168dcbb3de5e09ab9fc349
- SHA512 624e0433c785de0f801eaa302debc2f693d3b7d5ed7ebcad4cbebb8722ccd92422acb2f56c71272ee196929950ead342e3416003ca203ce17d1a4be9b4f8344c
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnr:AylFHUv6ReIt0jSrOI
- TLSH T133357E02B94DC2B1D18C14702D6F73366D349A5A3B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE