General
- Target 418abfe67540d81d4274aad443e9b528ede03b2ee9b84ab9b675b616f9ac604d
- Size 1.4MB
- Sample260813-xlltsawgrd
- SHA256 418abfe67540d81d4274aad443e9b528ede03b2ee9b84ab9b675b616f9ac604d
- MD5 5b11bb0f5db93b680f70b8a838f704d3
- SHA1 95fe27a731cddea8459185cbca17174f3e487f42
- SHA512 409d04af1b8a4901dd6c701aebadecf1214609f19d291332ba24b27bf768156875ed658115daaf1f491dc4f57030df4303d79f4847755fe220e701ed52ba6b40
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqc:MLl7k/B2mGbUMoLy
- TLSH T19C65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
418abfe67540d81d4274aad443e9b528ede03b2ee9b84ab9b675b616f9ac604d.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 418abfe67540d81d4274aad443e9b528ede03b2ee9b84ab9b675b616f9ac604d
- Size 1.4MB
- SHA256 418abfe67540d81d4274aad443e9b528ede03b2ee9b84ab9b675b616f9ac604d
- MD5 5b11bb0f5db93b680f70b8a838f704d3
- SHA1 95fe27a731cddea8459185cbca17174f3e487f42
- SHA512 409d04af1b8a4901dd6c701aebadecf1214609f19d291332ba24b27bf768156875ed658115daaf1f491dc4f57030df4303d79f4847755fe220e701ed52ba6b40
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqc:MLl7k/B2mGbUMoLy
- TLSH T19C65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE