General
- Target b9f02ac837c0d784d509b20b0ed8162a472226b431e3a808064cb7e3358808dd
- Size 7.2MB
- Sample260813-wrt7nscd94
- SHA256 b9f02ac837c0d784d509b20b0ed8162a472226b431e3a808064cb7e3358808dd
- MD5 8009278f83307c2037a641a5e26c4c15
- SHA1 037c50d1cbf32692ab9e6d6b545cfd7353c197c7
- SHA512 187cb811a0c4090339f34a2ad8864ead4f558687cda4887d419d860882cb6ba4b643132771394cd4e5ed0fc6dd358d8b5f50025c0fc0bf74d0e5b0cb67fe457b
- SSDEEP 196608:cnRu21rStp0ye7Tgu3XiSkkRqTvAjJAunmPkDl:cRu2cCR7TgunivkwuS5PkB
- TLSH T12576233FB24B653EE06A1A3A7972E510583B7B6165164C56D6F0C88CCF2A4B02D3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b9f02ac837c0d784d509b20b0ed8162a472226b431e3a808064cb7e3358808dd.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target b9f02ac837c0d784d509b20b0ed8162a472226b431e3a808064cb7e3358808dd
- Size 7.2MB
- SHA256 b9f02ac837c0d784d509b20b0ed8162a472226b431e3a808064cb7e3358808dd
- MD5 8009278f83307c2037a641a5e26c4c15
- SHA1 037c50d1cbf32692ab9e6d6b545cfd7353c197c7
- SHA512 187cb811a0c4090339f34a2ad8864ead4f558687cda4887d419d860882cb6ba4b643132771394cd4e5ed0fc6dd358d8b5f50025c0fc0bf74d0e5b0cb67fe457b
- SSDEEP 196608:cnRu21rStp0ye7Tgu3XiSkkRqTvAjJAunmPkDl:cRu2cCR7TgunivkwuS5PkB
- TLSH T12576233FB24B653EE06A1A3A7972E510583B7B6165164C56D6F0C88CCF2A4B02D3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.