General
- Target d25b3a6cc2eb30e24b56fdd899a0bb20da205873d9c699a5bb44e0e73c69c7de
- Size 845KB
- Sample260810-mnwfwsxama
- SHA256 d25b3a6cc2eb30e24b56fdd899a0bb20da205873d9c699a5bb44e0e73c69c7de
- MD5 099b6d0f5cd359f105a699b438e8bcf5
- SHA1 d008f9064f329fc62a81e5d5cf70bd432f209f29
- SHA512 0a3e28d5bf0a18b4c2e2bc89b0f94de6ed090d10d22651176d48b53cf311db8d09b8ce79342eb91bab3a89a82ed10a97f2f9fb70ca4f8580348b6205acc7dcb8
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iod:XLl7k/B2mGbUMoJnAhLrnAhUQQi
- TLSH T10605CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d25b3a6cc2eb30e24b56fdd899a0bb20da205873d9c699a5bb44e0e73c69c7de.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d25b3a6cc2eb30e24b56fdd899a0bb20da205873d9c699a5bb44e0e73c69c7de
- Size 845KB
- SHA256 d25b3a6cc2eb30e24b56fdd899a0bb20da205873d9c699a5bb44e0e73c69c7de
- MD5 099b6d0f5cd359f105a699b438e8bcf5
- SHA1 d008f9064f329fc62a81e5d5cf70bd432f209f29
- SHA512 0a3e28d5bf0a18b4c2e2bc89b0f94de6ed090d10d22651176d48b53cf311db8d09b8ce79342eb91bab3a89a82ed10a97f2f9fb70ca4f8580348b6205acc7dcb8
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iod:XLl7k/B2mGbUMoJnAhLrnAhUQQi
- TLSH T10605CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE