General
- Target 67e30c2927e6fc9f5677766b1b8a8ea924c984160125b5706768b054e047e430
- Size 1.9MB
- Sample260813-sdznfsbl3s
- SHA256 67e30c2927e6fc9f5677766b1b8a8ea924c984160125b5706768b054e047e430
- MD5 b1b4d425d5a3674c08ef844cf7eb07f9
- SHA1 ce239a6271e33c5be4e3cbb42a740d597f49ebee
- SHA512 f6fb029abc03417292c945a6b16b031e6c6a6d6d31ea48748a8da2c8349e8bfa2fa8cc6803020bfd1bff198ce6d7542ab0f6d0e874aa6d4d5c68a4e4bf128d35
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyN:WylFHUv6ReIt0jSrOW88Xq
- TLSH T198957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
67e30c2927e6fc9f5677766b1b8a8ea924c984160125b5706768b054e047e430.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 67e30c2927e6fc9f5677766b1b8a8ea924c984160125b5706768b054e047e430
- Size 1.9MB
- SHA256 67e30c2927e6fc9f5677766b1b8a8ea924c984160125b5706768b054e047e430
- MD5 b1b4d425d5a3674c08ef844cf7eb07f9
- SHA1 ce239a6271e33c5be4e3cbb42a740d597f49ebee
- SHA512 f6fb029abc03417292c945a6b16b031e6c6a6d6d31ea48748a8da2c8349e8bfa2fa8cc6803020bfd1bff198ce6d7542ab0f6d0e874aa6d4d5c68a4e4bf128d35
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyN:WylFHUv6ReIt0jSrOW88Xq
- TLSH T198957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE