General
- Target d16df4eff182dc8ce11c5eeb10cb0d43d66507601de4465d5222c5f9b4b38547
- Size 1.4MB
- Sample260805-ntvbfswgkh
- SHA256 d16df4eff182dc8ce11c5eeb10cb0d43d66507601de4465d5222c5f9b4b38547
- MD5 31d63d4d05e60a6a88f4b7d6986e791a
- SHA1 814670246d70929dee54c375211cbbb174e603b9
- SHA512 30db38f2703240527faae9c9a9a2342dedaf3f9f5d5c8805e1b16dd2ef3e0cdd59814c0867c40a570ad5f9e8ca84af52c8a3571e6a975d46464dc20652e958ac
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75z:MLl7k/B2mGbUMoLnAhp
- TLSH T18B65E02D32AD5250E4EE5078B80E7691E6727835173295EF36E0C63D9B33BE87639E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d16df4eff182dc8ce11c5eeb10cb0d43d66507601de4465d5222c5f9b4b38547.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d16df4eff182dc8ce11c5eeb10cb0d43d66507601de4465d5222c5f9b4b38547
- Size 1.4MB
- SHA256 d16df4eff182dc8ce11c5eeb10cb0d43d66507601de4465d5222c5f9b4b38547
- MD5 31d63d4d05e60a6a88f4b7d6986e791a
- SHA1 814670246d70929dee54c375211cbbb174e603b9
- SHA512 30db38f2703240527faae9c9a9a2342dedaf3f9f5d5c8805e1b16dd2ef3e0cdd59814c0867c40a570ad5f9e8ca84af52c8a3571e6a975d46464dc20652e958ac
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75z:MLl7k/B2mGbUMoLnAhp
- TLSH T18B65E02D32AD5250E4EE5078B80E7691E6727835173295EF36E0C63D9B33BE87639E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE