General
- Target 4bc1fc4759691c2e1526c371bdcae555b066c51e9f7d7c73eb593b2459218168
- Size 841KB
- Sample260807-ln16ps1hrg
- SHA256 4bc1fc4759691c2e1526c371bdcae555b066c51e9f7d7c73eb593b2459218168
- MD5 709f5818a697d503d24e213260bf2c13
- SHA1 8d7044ab9fe2bbe56b44065d12075cd9d3ed2fc8
- SHA512 c0c4fa2313b3b99b115476bb24aac047e12e324ede6ad5c205cd40cb809ab34d8b9bf43a50b77aa6e11c64304b52cc8a78be0f414bc65f08cc16e53a68b980c9
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoH:XLl7k/B2mGbUMoJnAhLrnAhUQQU
- TLSH T1AF05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4bc1fc4759691c2e1526c371bdcae555b066c51e9f7d7c73eb593b2459218168.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4bc1fc4759691c2e1526c371bdcae555b066c51e9f7d7c73eb593b2459218168
- Size 841KB
- SHA256 4bc1fc4759691c2e1526c371bdcae555b066c51e9f7d7c73eb593b2459218168
- MD5 709f5818a697d503d24e213260bf2c13
- SHA1 8d7044ab9fe2bbe56b44065d12075cd9d3ed2fc8
- SHA512 c0c4fa2313b3b99b115476bb24aac047e12e324ede6ad5c205cd40cb809ab34d8b9bf43a50b77aa6e11c64304b52cc8a78be0f414bc65f08cc16e53a68b980c9
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoH:XLl7k/B2mGbUMoJnAhLrnAhUQQU
- TLSH T1AF05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE