General
- Target d498b05305cb485e5f52cbf1a99ddd2506a4690cdd0eab70a2af4a3a335b84f9
- Size 842KB
- Sample260809-lcg9fscn7t
- SHA256 d498b05305cb485e5f52cbf1a99ddd2506a4690cdd0eab70a2af4a3a335b84f9
- MD5 510ac51cd5bf473f0cfd5485c62267aa
- SHA1 3e33c28b5fd29af515e090db0fba829002393757
- SHA512 f88aec63b386eef48251e6626e836a5ea8ddaab1b1c83c7f5b0d0d506cbacc03941fdf3092c82dd5a03bcadefe4c762a2562f51ff9566b44f042dd388b2832da
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iot:XLl7k/B2mGbUMoJnAhLrnAhUQQm
- TLSH T15A05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d498b05305cb485e5f52cbf1a99ddd2506a4690cdd0eab70a2af4a3a335b84f9.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d498b05305cb485e5f52cbf1a99ddd2506a4690cdd0eab70a2af4a3a335b84f9
- Size 842KB
- SHA256 d498b05305cb485e5f52cbf1a99ddd2506a4690cdd0eab70a2af4a3a335b84f9
- MD5 510ac51cd5bf473f0cfd5485c62267aa
- SHA1 3e33c28b5fd29af515e090db0fba829002393757
- SHA512 f88aec63b386eef48251e6626e836a5ea8ddaab1b1c83c7f5b0d0d506cbacc03941fdf3092c82dd5a03bcadefe4c762a2562f51ff9566b44f042dd388b2832da
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iot:XLl7k/B2mGbUMoJnAhLrnAhUQQm
- TLSH T15A05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE