General
- Target dc72a2e272211676ba40080be43a558808080a98c590d8de2938836ec867c195
- Size 686KB
- Sample260812-mz2gaavemd
- SHA256 dc72a2e272211676ba40080be43a558808080a98c590d8de2938836ec867c195
- MD5 9e7f2317d58cdf1e7200eb4384d3d144
- SHA1 8d5469bd2064d60d39f6e155e98784d736f244d3
- SHA512 e566740c01758d2ef66acf877a50cb0a324b77146f4a64c783808360e954de0bb3f74a4ce558ebdfe824947242cbe0d66fcdc188d2d7402ee410223f1b0bee3d
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJQ:XLl7k/B2mGbUMoJnAhLrQ
- TLSH T1DDE4D02C32AD1261E4AE9078E84BB151D67278751732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dc72a2e272211676ba40080be43a558808080a98c590d8de2938836ec867c195.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
dc72a2e272211676ba40080be43a558808080a98c590d8de2938836ec867c195.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target dc72a2e272211676ba40080be43a558808080a98c590d8de2938836ec867c195
- Size 686KB
- SHA256 dc72a2e272211676ba40080be43a558808080a98c590d8de2938836ec867c195
- MD5 9e7f2317d58cdf1e7200eb4384d3d144
- SHA1 8d5469bd2064d60d39f6e155e98784d736f244d3
- SHA512 e566740c01758d2ef66acf877a50cb0a324b77146f4a64c783808360e954de0bb3f74a4ce558ebdfe824947242cbe0d66fcdc188d2d7402ee410223f1b0bee3d
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJQ:XLl7k/B2mGbUMoJnAhLrQ
- TLSH T1DDE4D02C32AD1261E4AE9078E84BB151D67278751732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE