General
- Target 8db81952720be3131b4e8f245a0883369648b0b1d7b251e0c5a79266e464e3fe
- Size 1.2MB
- Sample260812-k2wygadn9t
- SHA256 8db81952720be3131b4e8f245a0883369648b0b1d7b251e0c5a79266e464e3fe
- MD5 edf2e3405bf33ed9ce56bd3c593a5797
- SHA1 115e6658e65dd9e783e94ddb3559326cbd2df3ae
- SHA512 f28b756b347267a5049fa637595e027850a6ae62bb740970eeeb4461c087c8093e079a3871cca7f7d716f846e568a23af7a8985aab7be30c28526747998f539d
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHo:VptHFyrsy7t+TSQDsy777vxCRbao
- TLSH T1A4551229776CCB2AC0CD1D32B51EFEFC6A288D558B79C5673AB47B4A183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
8db81952720be3131b4e8f245a0883369648b0b1d7b251e0c5a79266e464e3fe.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
8db81952720be3131b4e8f245a0883369648b0b1d7b251e0c5a79266e464e3fe.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 8db81952720be3131b4e8f245a0883369648b0b1d7b251e0c5a79266e464e3fe
- Size 1.2MB
- SHA256 8db81952720be3131b4e8f245a0883369648b0b1d7b251e0c5a79266e464e3fe
- MD5 edf2e3405bf33ed9ce56bd3c593a5797
- SHA1 115e6658e65dd9e783e94ddb3559326cbd2df3ae
- SHA512 f28b756b347267a5049fa637595e027850a6ae62bb740970eeeb4461c087c8093e079a3871cca7f7d716f846e568a23af7a8985aab7be30c28526747998f539d
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHo:VptHFyrsy7t+TSQDsy777vxCRbao
- TLSH T1A4551229776CCB2AC0CD1D32B51EFEFC6A288D558B79C5673AB47B4A183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE