General
- Target ffc044720c067c69cc99a1f7e738456ccc6830ca4d1b6cb77eb751f6c4d96cec
- Size 841KB
- Sample260807-kyppzsaq2y
- SHA256 ffc044720c067c69cc99a1f7e738456ccc6830ca4d1b6cb77eb751f6c4d96cec
- MD5 af4c4fda0a3467f536ba51072469cfa5
- SHA1 e3730e37d5b5186e3c63c215456c0e5a591dd364
- SHA512 4c537abedc3e147225d98cbde21d2c3ff13c98cdccbb959180cbdb3bbc4bbaaffa687439d28c1c28d202205055165618c1a2a45444efb5782aac638dca05de48
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoM:XLl7k/B2mGbUMoJnAhLrnAhUQQ3
- TLSH T17D05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ffc044720c067c69cc99a1f7e738456ccc6830ca4d1b6cb77eb751f6c4d96cec.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ffc044720c067c69cc99a1f7e738456ccc6830ca4d1b6cb77eb751f6c4d96cec
- Size 841KB
- SHA256 ffc044720c067c69cc99a1f7e738456ccc6830ca4d1b6cb77eb751f6c4d96cec
- MD5 af4c4fda0a3467f536ba51072469cfa5
- SHA1 e3730e37d5b5186e3c63c215456c0e5a591dd364
- SHA512 4c537abedc3e147225d98cbde21d2c3ff13c98cdccbb959180cbdb3bbc4bbaaffa687439d28c1c28d202205055165618c1a2a45444efb5782aac638dca05de48
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoM:XLl7k/B2mGbUMoJnAhLrnAhUQQ3
- TLSH T17D05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE