General
- Target 99f2ad549bf07092b6f10bda12ccbe5fdcb92d54b3266e8befed075a6ee8fc48
- Size 845KB
- Sample260816-ylabeswthz
- SHA256 99f2ad549bf07092b6f10bda12ccbe5fdcb92d54b3266e8befed075a6ee8fc48
- MD5 a0f2710522237870adc0c3828d9a34bd
- SHA1 9c3491a437d5482e885cf770f0635d21abb16c08
- SHA512 096ca526cf557a681a0f72751a5850063c804026dc458643daf71dedd876ef5cd2c83af69cb3ed8f174f47438927c86cedba8123eee54436be6ec2462e599a3c
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioe:XLl7k/B2mGbUMoJnAhLrnAhUQQ1
- TLSH T19F05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
99f2ad549bf07092b6f10bda12ccbe5fdcb92d54b3266e8befed075a6ee8fc48.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 99f2ad549bf07092b6f10bda12ccbe5fdcb92d54b3266e8befed075a6ee8fc48
- Size 845KB
- SHA256 99f2ad549bf07092b6f10bda12ccbe5fdcb92d54b3266e8befed075a6ee8fc48
- MD5 a0f2710522237870adc0c3828d9a34bd
- SHA1 9c3491a437d5482e885cf770f0635d21abb16c08
- SHA512 096ca526cf557a681a0f72751a5850063c804026dc458643daf71dedd876ef5cd2c83af69cb3ed8f174f47438927c86cedba8123eee54436be6ec2462e599a3c
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ioe:XLl7k/B2mGbUMoJnAhLrnAhUQQ1
- TLSH T19F05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE