General
- Target 2ab50b18913fdf1d3a02d021ee6f3ff6c5d2e08aad41a4678125b935e56db93b
- Size 625KB
- Sample260816-q2khbsdf73
- SHA256 2ab50b18913fdf1d3a02d021ee6f3ff6c5d2e08aad41a4678125b935e56db93b
- MD5 ec88cd1ad621a6f2413a3afb16942ac3
- SHA1 c07d7515dfdbcd8e6193292f08755c82fcbef8db
- SHA512 2e5422eacecea623c50cd300c3ce0c4ec66d97ecb9e94e04ddbae0f024bd4a4a7d05677d39a857a949e98a0157a3a1bcbb6ca32c77c471573e2e56edd6192541
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdNU:XLl7k/B2mGbUMoJ1
- TLSH T181D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2ab50b18913fdf1d3a02d021ee6f3ff6c5d2e08aad41a4678125b935e56db93b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2ab50b18913fdf1d3a02d021ee6f3ff6c5d2e08aad41a4678125b935e56db93b
- Size 625KB
- SHA256 2ab50b18913fdf1d3a02d021ee6f3ff6c5d2e08aad41a4678125b935e56db93b
- MD5 ec88cd1ad621a6f2413a3afb16942ac3
- SHA1 c07d7515dfdbcd8e6193292f08755c82fcbef8db
- SHA512 2e5422eacecea623c50cd300c3ce0c4ec66d97ecb9e94e04ddbae0f024bd4a4a7d05677d39a857a949e98a0157a3a1bcbb6ca32c77c471573e2e56edd6192541
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdNU:XLl7k/B2mGbUMoJ1
- TLSH T181D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE