General
- Target 2b1adb89ced061e091c973573608d87c6e19bc8f3e29daf454b70e18b21f8867
- Size 1.9MB
- Sample260813-rwhl8aar2s
- SHA256 2b1adb89ced061e091c973573608d87c6e19bc8f3e29daf454b70e18b21f8867
- MD5 2375b457c04a088a55065224d1dcf605
- SHA1 9e96a9b8595ded0299b93eb77bac5a4f8513ae07
- SHA512 ec6a6dd077c263e5fc57b6f50855d0280b1b618f670b1c97187ff0ccc525097df3470e7bdec94494d5bc8101d77265b83e42ee41da564d3925bc377faf854a11
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyK:WylFHUv6ReIt0jSrOW88Xx
- TLSH T15A957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2b1adb89ced061e091c973573608d87c6e19bc8f3e29daf454b70e18b21f8867.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2b1adb89ced061e091c973573608d87c6e19bc8f3e29daf454b70e18b21f8867
- Size 1.9MB
- SHA256 2b1adb89ced061e091c973573608d87c6e19bc8f3e29daf454b70e18b21f8867
- MD5 2375b457c04a088a55065224d1dcf605
- SHA1 9e96a9b8595ded0299b93eb77bac5a4f8513ae07
- SHA512 ec6a6dd077c263e5fc57b6f50855d0280b1b618f670b1c97187ff0ccc525097df3470e7bdec94494d5bc8101d77265b83e42ee41da564d3925bc377faf854a11
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyK:WylFHUv6ReIt0jSrOW88Xx
- TLSH T15A957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE