General
- Target 9ec5a65519397c84c9b4634e6d0fa6dfd6efb8ec8ced7e4212821acd5c44c38b
- Size 1.1MB
- Sample260811-nwsweadn3y
- SHA256 9ec5a65519397c84c9b4634e6d0fa6dfd6efb8ec8ced7e4212821acd5c44c38b
- MD5 0ffea22b9b7d4091ded55fddb4ce7c27
- SHA1 bbdeb86651e768eeb406f55c31803bd98bb47c64
- SHA512 da07897821cbad000e6093c0111176514fbebe4079edfd879a9e867cfd436dbaf59dae95c4aeebef520e948bd17f52c2403d089a596cae8febf1cbd8aaffb4e9
- SSDEEP 24576:QptHFyrsy7t+TSQDsy777vxCRbapnnAhUQfnAhUQfnAhUQ/:Qp5FE2SHY77xwi884
- TLSH T1D1358C1D36AE1194E46B90789D065305E672782137239AFF26E2D178CB33EE87E38F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9ec5a65519397c84c9b4634e6d0fa6dfd6efb8ec8ced7e4212821acd5c44c38b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9ec5a65519397c84c9b4634e6d0fa6dfd6efb8ec8ced7e4212821acd5c44c38b
- Size 1.1MB
- SHA256 9ec5a65519397c84c9b4634e6d0fa6dfd6efb8ec8ced7e4212821acd5c44c38b
- MD5 0ffea22b9b7d4091ded55fddb4ce7c27
- SHA1 bbdeb86651e768eeb406f55c31803bd98bb47c64
- SHA512 da07897821cbad000e6093c0111176514fbebe4079edfd879a9e867cfd436dbaf59dae95c4aeebef520e948bd17f52c2403d089a596cae8febf1cbd8aaffb4e9
- SSDEEP 24576:QptHFyrsy7t+TSQDsy777vxCRbapnnAhUQfnAhUQfnAhUQ/:Qp5FE2SHY77xwi884
- TLSH T1D1358C1D36AE1194E46B90789D065305E672782137239AFF26E2D178CB33EE87E38F51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE