General
- Target b44aa1d183102a466777dc49d2c79a63cd5bede9567f4c0fef8f6df9798c3f0e
- Size 686KB
- Sample260817-ngp6zaba83
- SHA256 b44aa1d183102a466777dc49d2c79a63cd5bede9567f4c0fef8f6df9798c3f0e
- MD5 81397ac83c82759ec71fe705d64f5a1a
- SHA1 42a619015536a40d05e06ea58e9847ecf49173ae
- SHA512 b4d01f00fca79249c033dc89ea66593a670620134fa7e59ff5b47dbe055d80e05499d33dca9955bc0f2645b91ba8c39a749e2372ac8ec4ef6b46e2fe875dbd9b
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJF:XLl7k/B2mGbUMoJnAhLrF
- TLSH T148E4D02C32AD1261E4AE9078E84BB251D67278751732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b44aa1d183102a466777dc49d2c79a63cd5bede9567f4c0fef8f6df9798c3f0e.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b44aa1d183102a466777dc49d2c79a63cd5bede9567f4c0fef8f6df9798c3f0e
- Size 686KB
- SHA256 b44aa1d183102a466777dc49d2c79a63cd5bede9567f4c0fef8f6df9798c3f0e
- MD5 81397ac83c82759ec71fe705d64f5a1a
- SHA1 42a619015536a40d05e06ea58e9847ecf49173ae
- SHA512 b4d01f00fca79249c033dc89ea66593a670620134fa7e59ff5b47dbe055d80e05499d33dca9955bc0f2645b91ba8c39a749e2372ac8ec4ef6b46e2fe875dbd9b
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJF:XLl7k/B2mGbUMoJnAhLrF
- TLSH T148E4D02C32AD1261E4AE9078E84BB251D67278751732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE