General
- Target 1ff52c4549caf30345f38bc0b8b04cec25f8895fd1455ca8a537e274b2ac9e3d
- Size 843KB
- Sample260808-mswx8avfna
- SHA256 1ff52c4549caf30345f38bc0b8b04cec25f8895fd1455ca8a537e274b2ac9e3d
- MD5 f8ca8e15e34c13ee2502858948bf524c
- SHA1 3779d94d0b29ca382e041ac6c2878a45dd18f037
- SHA512 d45bfec8bd7f483db24742783af8b81325af60448d60d0dae272e79c28d849725fad4ec2d474e9adef2c8d01dc9b046ce360a8b376aad0c7f9f7237fba3c3280
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoV:XLl7k/B2mGbUMoJnAhLrnAhUQQS
- TLSH T1E605CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1ff52c4549caf30345f38bc0b8b04cec25f8895fd1455ca8a537e274b2ac9e3d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 1ff52c4549caf30345f38bc0b8b04cec25f8895fd1455ca8a537e274b2ac9e3d
- Size 843KB
- SHA256 1ff52c4549caf30345f38bc0b8b04cec25f8895fd1455ca8a537e274b2ac9e3d
- MD5 f8ca8e15e34c13ee2502858948bf524c
- SHA1 3779d94d0b29ca382e041ac6c2878a45dd18f037
- SHA512 d45bfec8bd7f483db24742783af8b81325af60448d60d0dae272e79c28d849725fad4ec2d474e9adef2c8d01dc9b046ce360a8b376aad0c7f9f7237fba3c3280
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoV:XLl7k/B2mGbUMoJnAhLrnAhUQQS
- TLSH T1E605CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE