General
- Target 96fc4e89e57362242c5708e3df9d58dde1db742ef3ff0b14a0c2616a36a8d2f0
- Size 1.4MB
- Sample260815-rf5rtaxhke
- SHA256 96fc4e89e57362242c5708e3df9d58dde1db742ef3ff0b14a0c2616a36a8d2f0
- MD5 585e5bc729c79bec3bec1e46c1f26135
- SHA1 4712f92a87b5308cc90f7cb86c2a60a0f6a282d7
- SHA512 35aa4fbbfbf9cda858006eb24249acf9076b699eadda4cfa46fc22898919337f0cafd69207fa84b763482f3545d8a439f4e08c512fbc9873a15c32ea56f49d90
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkH:MLl7k/B2mGbUMoLu
- TLSH T16B65F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
96fc4e89e57362242c5708e3df9d58dde1db742ef3ff0b14a0c2616a36a8d2f0.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 96fc4e89e57362242c5708e3df9d58dde1db742ef3ff0b14a0c2616a36a8d2f0
- Size 1.4MB
- SHA256 96fc4e89e57362242c5708e3df9d58dde1db742ef3ff0b14a0c2616a36a8d2f0
- MD5 585e5bc729c79bec3bec1e46c1f26135
- SHA1 4712f92a87b5308cc90f7cb86c2a60a0f6a282d7
- SHA512 35aa4fbbfbf9cda858006eb24249acf9076b699eadda4cfa46fc22898919337f0cafd69207fa84b763482f3545d8a439f4e08c512fbc9873a15c32ea56f49d90
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkH:MLl7k/B2mGbUMoLu
- TLSH T16B65F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE