General
- Target ef89d9c3844f0398fed40f9c71a0d480a5db85f7f3b282b7fbd452e16753920c
- Size 1.4MB
- Sample260810-1wlhjsvsas
- SHA256 ef89d9c3844f0398fed40f9c71a0d480a5db85f7f3b282b7fbd452e16753920c
- MD5 fc9810de7a0d4b7bbe65cc3500c4ae48
- SHA1 b0e8cd7d45d540a8735fcdd46bd2cb8ee930d9d8
- SHA512 17145f8bc4cdd87fe9aa5802a232255cdd6286579c8ca4ca090fe471c0f00942533605895cafd5635fe9c73a44ee4b35f0af5d7272ba39c8544c8ef4a07c1bbf
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75U:MLl7k/B2mGbUMoLnAhq
- TLSH T19565E02D32AD5260E4EE5078B80E7691D6727835173295EF36E0C63D9B33BE87639E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ef89d9c3844f0398fed40f9c71a0d480a5db85f7f3b282b7fbd452e16753920c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ef89d9c3844f0398fed40f9c71a0d480a5db85f7f3b282b7fbd452e16753920c
- Size 1.4MB
- SHA256 ef89d9c3844f0398fed40f9c71a0d480a5db85f7f3b282b7fbd452e16753920c
- MD5 fc9810de7a0d4b7bbe65cc3500c4ae48
- SHA1 b0e8cd7d45d540a8735fcdd46bd2cb8ee930d9d8
- SHA512 17145f8bc4cdd87fe9aa5802a232255cdd6286579c8ca4ca090fe471c0f00942533605895cafd5635fe9c73a44ee4b35f0af5d7272ba39c8544c8ef4a07c1bbf
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75U:MLl7k/B2mGbUMoLnAhq
- TLSH T19565E02D32AD5260E4EE5078B80E7691D6727835173295EF36E0C63D9B33BE87639E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE