General
- Target 2796b602d83ecbd0d4749bdb06a9e51785ddc6e8e07bd6b82dc71e5a41b74e81
- Size 842KB
- Sample260815-rr3rlaybkb
- SHA256 2796b602d83ecbd0d4749bdb06a9e51785ddc6e8e07bd6b82dc71e5a41b74e81
- MD5 7f5635baa35c33a81b079a9db5289e4e
- SHA1 0833cfdffc0d9fc903041e999fe210db7d11e0a4
- SHA512 82d8648ea251cfd480f8aa4e756fc1e0c83aa71315aa730aa232de156bd42e45a3be493e1e79aade8362e83ee41aac5fdfb6cb7a731887234c317c70acbd363f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoA:XLl7k/B2mGbUMoJnAhLrnAhUQQj
- TLSH T11B05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2796b602d83ecbd0d4749bdb06a9e51785ddc6e8e07bd6b82dc71e5a41b74e81.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2796b602d83ecbd0d4749bdb06a9e51785ddc6e8e07bd6b82dc71e5a41b74e81
- Size 842KB
- SHA256 2796b602d83ecbd0d4749bdb06a9e51785ddc6e8e07bd6b82dc71e5a41b74e81
- MD5 7f5635baa35c33a81b079a9db5289e4e
- SHA1 0833cfdffc0d9fc903041e999fe210db7d11e0a4
- SHA512 82d8648ea251cfd480f8aa4e756fc1e0c83aa71315aa730aa232de156bd42e45a3be493e1e79aade8362e83ee41aac5fdfb6cb7a731887234c317c70acbd363f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoA:XLl7k/B2mGbUMoJnAhLrnAhUQQj
- TLSH T11B05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE