General
- Target 126decaa9708852082eec910355913d8f0a4c6c274b47d62f226d0c58d5c93bd
- Size 845KB
- Sample260810-mnwfwsxalh
- SHA256 126decaa9708852082eec910355913d8f0a4c6c274b47d62f226d0c58d5c93bd
- MD5 08a41b7f65d09fec4a8480af9455b12a
- SHA1 f1335b529b703102751a58da018c8403ee75a78b
- SHA512 b26b329cb142ba562f59c47d88f6d4e80b97cbbc4cf52e2340e84ad7aad2e6c17a8b13c6302edf5a4cc25495078598d23533d3c531180b9dd53a3fbf001302ed
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ior:XLl7k/B2mGbUMoJnAhLrnAhUQQM
- TLSH T14B05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
126decaa9708852082eec910355913d8f0a4c6c274b47d62f226d0c58d5c93bd.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 126decaa9708852082eec910355913d8f0a4c6c274b47d62f226d0c58d5c93bd
- Size 845KB
- SHA256 126decaa9708852082eec910355913d8f0a4c6c274b47d62f226d0c58d5c93bd
- MD5 08a41b7f65d09fec4a8480af9455b12a
- SHA1 f1335b529b703102751a58da018c8403ee75a78b
- SHA512 b26b329cb142ba562f59c47d88f6d4e80b97cbbc4cf52e2340e84ad7aad2e6c17a8b13c6302edf5a4cc25495078598d23533d3c531180b9dd53a3fbf001302ed
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ior:XLl7k/B2mGbUMoJnAhLrnAhUQQM
- TLSH T14B05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE