General
- Target ff4d80f87e0e07ba65245738fd4b294a98f77400715b979bd495aa8f33ce5411
- Size 1.9MB
- Sample260812-mn432asscx
- SHA256 ff4d80f87e0e07ba65245738fd4b294a98f77400715b979bd495aa8f33ce5411
- MD5 635818f2ce45c42caf59a2c067a4833b
- SHA1 d0a84fe385553e663bbe718bb988781a6c25933d
- SHA512 b69c4e23e98e0d43e46771b6030cffddcca8eba76c10e6764968cb056c50b44be9185f0785bca17d943c923196b9720954745cb51e101258f1b07616a3bc4390
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQup:WylFHUv6ReIt0jSrOW88Xp
- TLSH T192957C16769D81E1D05A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ff4d80f87e0e07ba65245738fd4b294a98f77400715b979bd495aa8f33ce5411.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ff4d80f87e0e07ba65245738fd4b294a98f77400715b979bd495aa8f33ce5411.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ff4d80f87e0e07ba65245738fd4b294a98f77400715b979bd495aa8f33ce5411
- Size 1.9MB
- SHA256 ff4d80f87e0e07ba65245738fd4b294a98f77400715b979bd495aa8f33ce5411
- MD5 635818f2ce45c42caf59a2c067a4833b
- SHA1 d0a84fe385553e663bbe718bb988781a6c25933d
- SHA512 b69c4e23e98e0d43e46771b6030cffddcca8eba76c10e6764968cb056c50b44be9185f0785bca17d943c923196b9720954745cb51e101258f1b07616a3bc4390
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQup:WylFHUv6ReIt0jSrOW88Xp
- TLSH T192957C16769D81E1D05A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE