General
- Target 2f4da43c2266a8ec4a322c8d5c8defc9b5637637d5962e815b5268f7da3f187a
- Size 1.2MB
- Sample260813-mqtebaxerg
- SHA256 2f4da43c2266a8ec4a322c8d5c8defc9b5637637d5962e815b5268f7da3f187a
- MD5 abffef6ad11c5f66defbc4de9ede1c26
- SHA1 3dfdfa3cc13c1bc0367dc38e4fe6e54e14cd0f1f
- SHA512 dab2cf1b6c3acf6b4182770680e2f648cf88d8b0d9da561e0826935726c0a135b288fc7bfcc4dae39965c996fd18a705d6ac55767cbb6dedaa1c4f0fcf8bfc0c
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHl:VptHFyrsy7t+TSQDsy777vxCRbal
- TLSH T16F551229776CCB26C0CD1D32B51EFEF86A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2f4da43c2266a8ec4a322c8d5c8defc9b5637637d5962e815b5268f7da3f187a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2f4da43c2266a8ec4a322c8d5c8defc9b5637637d5962e815b5268f7da3f187a
- Size 1.2MB
- SHA256 2f4da43c2266a8ec4a322c8d5c8defc9b5637637d5962e815b5268f7da3f187a
- MD5 abffef6ad11c5f66defbc4de9ede1c26
- SHA1 3dfdfa3cc13c1bc0367dc38e4fe6e54e14cd0f1f
- SHA512 dab2cf1b6c3acf6b4182770680e2f648cf88d8b0d9da561e0826935726c0a135b288fc7bfcc4dae39965c996fd18a705d6ac55767cbb6dedaa1c4f0fcf8bfc0c
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHl:VptHFyrsy7t+TSQDsy777vxCRbal
- TLSH T16F551229776CCB26C0CD1D32B51EFEF86A288D558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE