General
- Target 0165f645f207f5c9c35f67f2c688c3a916c3be1fe1c85def13187388f71c57cd
- Size 1.9MB
- Sample260810-kz4wasfb38
- SHA256 0165f645f207f5c9c35f67f2c688c3a916c3be1fe1c85def13187388f71c57cd
- MD5 3094f3af2ff1838c1218dd4993fdd6e2
- SHA1 ef1ad88fbc02ccd31db9caa21de3d7ad5d08676e
- SHA512 24ff8a816fd88925c8896f11b84d670059a63aaefd9e9c063cb9688bca76e618b9f20c962eb6dddbad71e6251426cffbd865cbf226abbd6079014bc6100aad60
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQub:WylFHUv6ReIt0jSrOW88Xb
- TLSH T133957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0165f645f207f5c9c35f67f2c688c3a916c3be1fe1c85def13187388f71c57cd.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0165f645f207f5c9c35f67f2c688c3a916c3be1fe1c85def13187388f71c57cd
- Size 1.9MB
- SHA256 0165f645f207f5c9c35f67f2c688c3a916c3be1fe1c85def13187388f71c57cd
- MD5 3094f3af2ff1838c1218dd4993fdd6e2
- SHA1 ef1ad88fbc02ccd31db9caa21de3d7ad5d08676e
- SHA512 24ff8a816fd88925c8896f11b84d670059a63aaefd9e9c063cb9688bca76e618b9f20c962eb6dddbad71e6251426cffbd865cbf226abbd6079014bc6100aad60
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQub:WylFHUv6ReIt0jSrOW88Xb
- TLSH T133957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE