General
- Target b5ab0211350eabf42568e21af2d00145a59db5f57a9c4ed4b1a887fb04ee5d86
- Size 1.1MB
- Sample260815-pc5arswanc
- SHA256 b5ab0211350eabf42568e21af2d00145a59db5f57a9c4ed4b1a887fb04ee5d86
- MD5 f9a1a80e12199893da92af5e35dcf435
- SHA1 a83bd0077d00b9ea706ab0cde357c0923c3ba312
- SHA512 aaf5e77960651b9b68877c2fd7389d30ecf444998d1551809895fcc12b165845b9b11396ea244f215bc42614a449d223f3b76de14a0d0d0b88907292bfe57092
- SSDEEP 24576:QptHFyrsy7t+TSQDsy777vxCRbapnnAhUQfnAhUQfnAhUQP:Qp5FE2SHY77xwi88U
- TLSH T16D358C1D36AE1194E46B90789D065345E672782133239AFF25E2D178CB33EE87E38F91
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b5ab0211350eabf42568e21af2d00145a59db5f57a9c4ed4b1a887fb04ee5d86.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b5ab0211350eabf42568e21af2d00145a59db5f57a9c4ed4b1a887fb04ee5d86
- Size 1.1MB
- SHA256 b5ab0211350eabf42568e21af2d00145a59db5f57a9c4ed4b1a887fb04ee5d86
- MD5 f9a1a80e12199893da92af5e35dcf435
- SHA1 a83bd0077d00b9ea706ab0cde357c0923c3ba312
- SHA512 aaf5e77960651b9b68877c2fd7389d30ecf444998d1551809895fcc12b165845b9b11396ea244f215bc42614a449d223f3b76de14a0d0d0b88907292bfe57092
- SSDEEP 24576:QptHFyrsy7t+TSQDsy777vxCRbapnnAhUQfnAhUQfnAhUQP:Qp5FE2SHY77xwi88U
- TLSH T16D358C1D36AE1194E46B90789D065345E672782133239AFF25E2D178CB33EE87E38F91
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE