General
- Target 4cfe6ba4785ba268c902d75e89b07b25d7444ed323b41125257aa51db0bf424a
- Size 845KB
- Sample260813-pzenmaba46
- SHA256 4cfe6ba4785ba268c902d75e89b07b25d7444ed323b41125257aa51db0bf424a
- MD5 563b511e8c96edde6401035e2b22091f
- SHA1 89a3ac7d86dd64ce382ba9dcccae7b16abb730ca
- SHA512 4e119c5032141813067892fdbf935d1e5eb8f3cfcd442c1bb83010b9069552248cacd1e3cc5826e85c9c887091bd429b4d926b2806559439bde58387ca8e7e77
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io7:XLl7k/B2mGbUMoJnAhLrnAhUQQQ
- TLSH T12B05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4cfe6ba4785ba268c902d75e89b07b25d7444ed323b41125257aa51db0bf424a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4cfe6ba4785ba268c902d75e89b07b25d7444ed323b41125257aa51db0bf424a
- Size 845KB
- SHA256 4cfe6ba4785ba268c902d75e89b07b25d7444ed323b41125257aa51db0bf424a
- MD5 563b511e8c96edde6401035e2b22091f
- SHA1 89a3ac7d86dd64ce382ba9dcccae7b16abb730ca
- SHA512 4e119c5032141813067892fdbf935d1e5eb8f3cfcd442c1bb83010b9069552248cacd1e3cc5826e85c9c887091bd429b4d926b2806559439bde58387ca8e7e77
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io7:XLl7k/B2mGbUMoJnAhLrnAhUQQQ
- TLSH T12B05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE