General
- Target 5bd22df10bdac674935b3b795a7754400c10a80b37656bddc1b2b9ccb79f55f6
- Size 1.9MB
- Sample260808-knw2back8z
- SHA256 5bd22df10bdac674935b3b795a7754400c10a80b37656bddc1b2b9ccb79f55f6
- MD5 6f4acacec1482965aba7d9ce0e335f9e
- SHA1 6bb5978203ce7f1bc87d11bd15b0abd62f118ef3
- SHA512 8fd2d8376b90d7aef697e45b8de90c60566a08a9d090f21e0097eb8b5519d244c2e5fc92b1d2dea0c58da289e0928150ab5999c6fadd4b2dd2e31b89d8163fb4
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyL:WylFHUv6ReIt0jSrOW88XI
- TLSH T13E957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5bd22df10bdac674935b3b795a7754400c10a80b37656bddc1b2b9ccb79f55f6.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5bd22df10bdac674935b3b795a7754400c10a80b37656bddc1b2b9ccb79f55f6
- Size 1.9MB
- SHA256 5bd22df10bdac674935b3b795a7754400c10a80b37656bddc1b2b9ccb79f55f6
- MD5 6f4acacec1482965aba7d9ce0e335f9e
- SHA1 6bb5978203ce7f1bc87d11bd15b0abd62f118ef3
- SHA512 8fd2d8376b90d7aef697e45b8de90c60566a08a9d090f21e0097eb8b5519d244c2e5fc92b1d2dea0c58da289e0928150ab5999c6fadd4b2dd2e31b89d8163fb4
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyL:WylFHUv6ReIt0jSrOW88XI
- TLSH T13E957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE