General
- Target 7f38d952782f479536e140bfe878cee642f779b42547d94663f2b115b812618d
- Size 492KB
- Sample260808-knyvxack9z
- SHA256 7f38d952782f479536e140bfe878cee642f779b42547d94663f2b115b812618d
- MD5 f7cdd49e38808a7c0eb5e4692a96352c
- SHA1 a8a90409b241fa3ec871476dc8741f58c26db276
- SHA512 c2aa9314651b4a319eed9bf2e894f148ea7ffb75f93f13204c5c4b03df2017b0aea2488487eaf2d2e7933e6f332d8e3b00e5251696e6f85bc9e8dffe49871e73
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpZ:QptHFyrsy7t+TSQDsy777vxCRbapZ
- TLSH T15BB41229776CCB26C0CD1D32B51EFEFC6A288D558B79C5673AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
7f38d952782f479536e140bfe878cee642f779b42547d94663f2b115b812618d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 7f38d952782f479536e140bfe878cee642f779b42547d94663f2b115b812618d
- Size 492KB
- SHA256 7f38d952782f479536e140bfe878cee642f779b42547d94663f2b115b812618d
- MD5 f7cdd49e38808a7c0eb5e4692a96352c
- SHA1 a8a90409b241fa3ec871476dc8741f58c26db276
- SHA512 c2aa9314651b4a319eed9bf2e894f148ea7ffb75f93f13204c5c4b03df2017b0aea2488487eaf2d2e7933e6f332d8e3b00e5251696e6f85bc9e8dffe49871e73
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpZ:QptHFyrsy7t+TSQDsy777vxCRbapZ
- TLSH T15BB41229776CCB26C0CD1D32B51EFEFC6A288D558B79C5673AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE