General
- Target 1d279fe83d838fc88d42935e9e19e0cfd25c3ac0d907c13c23fe734120581d3d
- Size 1.1MB
- Sample260807-ryg4gaxelf
- SHA256 1d279fe83d838fc88d42935e9e19e0cfd25c3ac0d907c13c23fe734120581d3d
- MD5 4300c53a95a76955ba78c016b8d278bb
- SHA1 b0a273e32f9327409e31ff78ed274cf4f3b045d9
- SHA512 a5b2acd4db82cd0fe63cca6845d301651b077068a980760b68ad3bc5c6639802dcab6bb53b786a9541db6f39b51088433774f7be9e4ff8893b618525fe065ab7
- SSDEEP 24576:7yGXrIF9cddxJnUMQT/Xp2o5lG4vhvBuarbyd:7ZdY5/XzlG45Zuar
- TLSH T1F835BE12B68380F2D51A293014F6A73AEE7597450B35CBC3B3A4DE7DAC335919B3B14A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1d279fe83d838fc88d42935e9e19e0cfd25c3ac0d907c13c23fe734120581d3d.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 1d279fe83d838fc88d42935e9e19e0cfd25c3ac0d907c13c23fe734120581d3d
- Size 1.1MB
- SHA256 1d279fe83d838fc88d42935e9e19e0cfd25c3ac0d907c13c23fe734120581d3d
- MD5 4300c53a95a76955ba78c016b8d278bb
- SHA1 b0a273e32f9327409e31ff78ed274cf4f3b045d9
- SHA512 a5b2acd4db82cd0fe63cca6845d301651b077068a980760b68ad3bc5c6639802dcab6bb53b786a9541db6f39b51088433774f7be9e4ff8893b618525fe065ab7
- SSDEEP 24576:7yGXrIF9cddxJnUMQT/Xp2o5lG4vhvBuarbyd:7ZdY5/XzlG45Zuar
- TLSH T1F835BE12B68380F2D51A293014F6A73AEE7597450B35CBC3B3A4DE7DAC335919B3B14A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1