General
- Target e2ea20d4ed21a0a308bd4bbe5a32c7d0c1d66def0f71077d57955752a50e217a
- Size 628KB
- Sample260808-l14glaysew
- SHA256 e2ea20d4ed21a0a308bd4bbe5a32c7d0c1d66def0f71077d57955752a50e217a
- MD5 20e3e7990dd287a7bf54d0125a380660
- SHA1 b98ab2d3da96a2e2308c0cd01065a54fb31fdd00
- SHA512 f0ee23810faa393bc905208d72634f4db6ab513db517d1717bbfcfe7539d5f3c328a5eb084636677c98cc6a1d612effa917d74bfa2c02ee72b9ebc803ccc7591
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKO:XLl7k/B2mGbUMoJnAhtKO
- TLSH T103D4E02C32AD5260E0EE4178B80EB552E671B8351731A5EF36E0D57D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e2ea20d4ed21a0a308bd4bbe5a32c7d0c1d66def0f71077d57955752a50e217a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target e2ea20d4ed21a0a308bd4bbe5a32c7d0c1d66def0f71077d57955752a50e217a
- Size 628KB
- SHA256 e2ea20d4ed21a0a308bd4bbe5a32c7d0c1d66def0f71077d57955752a50e217a
- MD5 20e3e7990dd287a7bf54d0125a380660
- SHA1 b98ab2d3da96a2e2308c0cd01065a54fb31fdd00
- SHA512 f0ee23810faa393bc905208d72634f4db6ab513db517d1717bbfcfe7539d5f3c328a5eb084636677c98cc6a1d612effa917d74bfa2c02ee72b9ebc803ccc7591
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKO:XLl7k/B2mGbUMoJnAhtKO
- TLSH T103D4E02C32AD5260E0EE4178B80EB552E671B8351731A5EF36E0D57D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE