General
- Target c0070f2fa3e0337fc5384904a454f48ee44f0f2230f59bd750c4223c2bd1a6f7
- Size 842KB
- Sample260809-jqdgbatcmd
- SHA256 c0070f2fa3e0337fc5384904a454f48ee44f0f2230f59bd750c4223c2bd1a6f7
- MD5 cf5ecee82098ba30ea78d134823120ef
- SHA1 5e57f38d9e64988f5288c587c0ec1caf4254ec06
- SHA512 8b7926feddca1ca20edcb4be4cafdc6c965646b5893a6afbd5ae916ed7806220b4d30cc58a7413c41b70a1b478def1c6f5fd54b45852163fc42fb6f38d59d690
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io9:XLl7k/B2mGbUMoJnAhLrnAhUQQq
- TLSH T16605C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c0070f2fa3e0337fc5384904a454f48ee44f0f2230f59bd750c4223c2bd1a6f7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target c0070f2fa3e0337fc5384904a454f48ee44f0f2230f59bd750c4223c2bd1a6f7
- Size 842KB
- SHA256 c0070f2fa3e0337fc5384904a454f48ee44f0f2230f59bd750c4223c2bd1a6f7
- MD5 cf5ecee82098ba30ea78d134823120ef
- SHA1 5e57f38d9e64988f5288c587c0ec1caf4254ec06
- SHA512 8b7926feddca1ca20edcb4be4cafdc6c965646b5893a6afbd5ae916ed7806220b4d30cc58a7413c41b70a1b478def1c6f5fd54b45852163fc42fb6f38d59d690
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io9:XLl7k/B2mGbUMoJnAhLrnAhUQQq
- TLSH T16605C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE