General
- Target 9ec8dd971f436fa475ee79b04341a45ee64844ae5db7f011e4a58629bedce90b
- Size 629KB
- Sample260818-ndabcastbt
- SHA256 9ec8dd971f436fa475ee79b04341a45ee64844ae5db7f011e4a58629bedce90b
- MD5 4545610932368c7848c8b66d89735f9b
- SHA1 f75874edeb3bc63e27a743e09dbdd5699dc2021c
- SHA512 08eeb2d4c2d97c85c63a7dabfbb5db215966d6d5ddef1de441f099af4f633d4eb42136377f3195c8bc4f2b95bc7284dab2b0c5285397b75d736d3d158b4bc283
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKD0:XLl7k/B2mGbUMoJnAhtK4
- TLSH T123D4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9ec8dd971f436fa475ee79b04341a45ee64844ae5db7f011e4a58629bedce90b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9ec8dd971f436fa475ee79b04341a45ee64844ae5db7f011e4a58629bedce90b
- Size 629KB
- SHA256 9ec8dd971f436fa475ee79b04341a45ee64844ae5db7f011e4a58629bedce90b
- MD5 4545610932368c7848c8b66d89735f9b
- SHA1 f75874edeb3bc63e27a743e09dbdd5699dc2021c
- SHA512 08eeb2d4c2d97c85c63a7dabfbb5db215966d6d5ddef1de441f099af4f633d4eb42136377f3195c8bc4f2b95bc7284dab2b0c5285397b75d736d3d158b4bc283
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKD0:XLl7k/B2mGbUMoJnAhtK4
- TLSH T123D4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE