General
- Target df5c9fe64f693d4fd218a589177eca45e6ce67fa79b9af414b4c1ae3676b6db7
- Size 841KB
- Sample260810-jxgsbathka
- SHA256 df5c9fe64f693d4fd218a589177eca45e6ce67fa79b9af414b4c1ae3676b6db7
- MD5 f4964754ae7e7adf49b333696f612619
- SHA1 ec106b5bcf6d65b22571de4502a73c367a542a3f
- SHA512 3d6a3ee10ac81b74af498072d72cd0761f21f0d964e6ac0597b8127b94bb310ff36504220da35adcc92b72014473676fa9da5a0df390623e3136be13bc3cd802
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoD:XLl7k/B2mGbUMoJnAhLrnAhUQQg
- TLSH T1F805C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
df5c9fe64f693d4fd218a589177eca45e6ce67fa79b9af414b4c1ae3676b6db7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target df5c9fe64f693d4fd218a589177eca45e6ce67fa79b9af414b4c1ae3676b6db7
- Size 841KB
- SHA256 df5c9fe64f693d4fd218a589177eca45e6ce67fa79b9af414b4c1ae3676b6db7
- MD5 f4964754ae7e7adf49b333696f612619
- SHA1 ec106b5bcf6d65b22571de4502a73c367a542a3f
- SHA512 3d6a3ee10ac81b74af498072d72cd0761f21f0d964e6ac0597b8127b94bb310ff36504220da35adcc92b72014473676fa9da5a0df390623e3136be13bc3cd802
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoD:XLl7k/B2mGbUMoJnAhLrnAhUQQg
- TLSH T1F805C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE