General
- Target bef0dcd9e692b8fb965f2404494069e64e5a9ae0a25a70404b9ad6655f882bf3
- Size 628KB
- Sample260817-nbfqcayeng
- SHA256 bef0dcd9e692b8fb965f2404494069e64e5a9ae0a25a70404b9ad6655f882bf3
- MD5 6a415080f2155536c7225984d463ecf1
- SHA1 4e5ee4cd627b45f379265a88b4be56a657c35306
- SHA512 34143e3d1d0279b6d5d72976ab01d55564dae16f57cd894d44f6cbabaa43e5549b458952ff38a15db79dd826ab9f3affc34a75384c2915a29abbde85855dc278
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkkk:XLl7k/B2mGbUMoJQ
- TLSH T187D4F01D325D8361E0EE4038BC0FB690E636BC651B71D5EB3AB0D67D5A32BE83635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bef0dcd9e692b8fb965f2404494069e64e5a9ae0a25a70404b9ad6655f882bf3.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bef0dcd9e692b8fb965f2404494069e64e5a9ae0a25a70404b9ad6655f882bf3
- Size 628KB
- SHA256 bef0dcd9e692b8fb965f2404494069e64e5a9ae0a25a70404b9ad6655f882bf3
- MD5 6a415080f2155536c7225984d463ecf1
- SHA1 4e5ee4cd627b45f379265a88b4be56a657c35306
- SHA512 34143e3d1d0279b6d5d72976ab01d55564dae16f57cd894d44f6cbabaa43e5549b458952ff38a15db79dd826ab9f3affc34a75384c2915a29abbde85855dc278
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkkk:XLl7k/B2mGbUMoJQ
- TLSH T187D4F01D325D8361E0EE4038BC0FB690E636BC651B71D5EB3AB0D67D5A32BE83635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE