General
- Target bd45af612db9d8a5bfc82066cc4838f8b52895836812f0aa1da5e496a6817c59
- Size 841KB
- Sample260813-rwf4dsaq91
- SHA256 bd45af612db9d8a5bfc82066cc4838f8b52895836812f0aa1da5e496a6817c59
- MD5 2c7c4821f8b677721febdba845756bf8
- SHA1 2145c6776280efad7a2cd049b5d0572161faa285
- SHA512 39088fc83a4105629ea255802b419776986db0abb67721cb8e1b7efa61782afbeacec8c861fb1c577cdba294a2de64c96b5023f9ca7d17547ecbf48ceab50f36
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioe:XLl7k/B2mGbUMoJnAhLrnAhUQQd
- TLSH T17305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bd45af612db9d8a5bfc82066cc4838f8b52895836812f0aa1da5e496a6817c59.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bd45af612db9d8a5bfc82066cc4838f8b52895836812f0aa1da5e496a6817c59
- Size 841KB
- SHA256 bd45af612db9d8a5bfc82066cc4838f8b52895836812f0aa1da5e496a6817c59
- MD5 2c7c4821f8b677721febdba845756bf8
- SHA1 2145c6776280efad7a2cd049b5d0572161faa285
- SHA512 39088fc83a4105629ea255802b419776986db0abb67721cb8e1b7efa61782afbeacec8c861fb1c577cdba294a2de64c96b5023f9ca7d17547ecbf48ceab50f36
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioe:XLl7k/B2mGbUMoJnAhLrnAhUQQd
- TLSH T17305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE