General
- Target 2d91e9572bbd0072ffc4f0e1950fc5a0c5a3e8f039f612e0f5a6f3e1c87cb923
- Size 1.4MB
- Sample260815-q87lfaxfnc
- SHA256 2d91e9572bbd0072ffc4f0e1950fc5a0c5a3e8f039f612e0f5a6f3e1c87cb923
- MD5 38908c8bbd68f25e6e32e80255d5243e
- SHA1 0fe250744462f2591d953cf8663c10a074d3ef69
- SHA512 857952324518bd5e8218595fabeb5e1d7efe7b097cc67bcf94dd02f4d8296d889f822736e55b403334d62d0c72ab33a0082307aab162f8e3c6027dceb1dac9d7
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqM:MLl7k/B2mGbUMoLm
- TLSH T1E465E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2d91e9572bbd0072ffc4f0e1950fc5a0c5a3e8f039f612e0f5a6f3e1c87cb923.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2d91e9572bbd0072ffc4f0e1950fc5a0c5a3e8f039f612e0f5a6f3e1c87cb923
- Size 1.4MB
- SHA256 2d91e9572bbd0072ffc4f0e1950fc5a0c5a3e8f039f612e0f5a6f3e1c87cb923
- MD5 38908c8bbd68f25e6e32e80255d5243e
- SHA1 0fe250744462f2591d953cf8663c10a074d3ef69
- SHA512 857952324518bd5e8218595fabeb5e1d7efe7b097cc67bcf94dd02f4d8296d889f822736e55b403334d62d0c72ab33a0082307aab162f8e3c6027dceb1dac9d7
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqM:MLl7k/B2mGbUMoLm
- TLSH T1E465E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE