General
- Target 5ff4de35b089ae078e19016747e25eb4fb19bf3a64ee8a2fb845e7faa3c51955
- Size 686KB
- Sample260807-mkg44ashna
- SHA256 5ff4de35b089ae078e19016747e25eb4fb19bf3a64ee8a2fb845e7faa3c51955
- MD5 4f0f7128fc9135cfb637f4cb66e06214
- SHA1 1755d42e259791601f60917eabada6bf6b759f6e
- SHA512 19cafe2feebfcf98c41b61c644629384f6d051535443bbb65197595c542cc4f515c41d312bf487520d50748b5908d806f36f06b30171a01b48a0f1ddf730c8b0
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJo:XLl7k/B2mGbUMoJnAhLro
- TLSH T1DBE4D02C32AD1261E4AE9078E84BB151D67278751732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5ff4de35b089ae078e19016747e25eb4fb19bf3a64ee8a2fb845e7faa3c51955.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5ff4de35b089ae078e19016747e25eb4fb19bf3a64ee8a2fb845e7faa3c51955
- Size 686KB
- SHA256 5ff4de35b089ae078e19016747e25eb4fb19bf3a64ee8a2fb845e7faa3c51955
- MD5 4f0f7128fc9135cfb637f4cb66e06214
- SHA1 1755d42e259791601f60917eabada6bf6b759f6e
- SHA512 19cafe2feebfcf98c41b61c644629384f6d051535443bbb65197595c542cc4f515c41d312bf487520d50748b5908d806f36f06b30171a01b48a0f1ddf730c8b0
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJo:XLl7k/B2mGbUMoJnAhLro
- TLSH T1DBE4D02C32AD1261E4AE9078E84BB151D67278751732A5EF36E0C57D9B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE