General
- Target 9496c3921414589370e5df067b4ed7a79cf1968c84e24e0ee177431c63abb4c7
- Size 625KB
- Sample260812-ls436aej9w
- SHA256 9496c3921414589370e5df067b4ed7a79cf1968c84e24e0ee177431c63abb4c7
- MD5 a4b9286657fb294e7cefa3046a29bafa
- SHA1 f2794f46827b40f404cb6d51993feba8b4f42b38
- SHA512 8cc854105e875328ce194b8be5e7eb27583cbc2a20dd64a8e49d550166d117a8265e3f3f9c7b220e5b712bf75fef61c29671d2002ab3ed7cab483c2092e309ab
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdN7:XLl7k/B2mGbUMoJ6
- TLSH T151D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9496c3921414589370e5df067b4ed7a79cf1968c84e24e0ee177431c63abb4c7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
9496c3921414589370e5df067b4ed7a79cf1968c84e24e0ee177431c63abb4c7.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 9496c3921414589370e5df067b4ed7a79cf1968c84e24e0ee177431c63abb4c7
- Size 625KB
- SHA256 9496c3921414589370e5df067b4ed7a79cf1968c84e24e0ee177431c63abb4c7
- MD5 a4b9286657fb294e7cefa3046a29bafa
- SHA1 f2794f46827b40f404cb6d51993feba8b4f42b38
- SHA512 8cc854105e875328ce194b8be5e7eb27583cbc2a20dd64a8e49d550166d117a8265e3f3f9c7b220e5b712bf75fef61c29671d2002ab3ed7cab483c2092e309ab
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdN7:XLl7k/B2mGbUMoJ6
- TLSH T151D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE