General
- Target f116fbff87c14ae6c8f1664b418ae7bd1d4ef68950c51f39cbe7c9d640686964
- Size 844KB
- Sample260818-pdw1sasalg
- SHA256 f116fbff87c14ae6c8f1664b418ae7bd1d4ef68950c51f39cbe7c9d640686964
- MD5 2c1577dbcce2c20d3ea09968a141a596
- SHA1 d06c21fdc1db62e5d37de2c161ebf596556b7c25
- SHA512 fa3f04d05665608c61f4525a42a05e875be9c01fb11eac8eec59303440f071c2c27075f092aff7fd840655615b77737cab934405030b06ccc17d50bc7d0b8abe
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io4:XLl7k/B2mGbUMoJnAhLrnAhUQQL
- TLSH T1CE05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
f116fbff87c14ae6c8f1664b418ae7bd1d4ef68950c51f39cbe7c9d640686964.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target f116fbff87c14ae6c8f1664b418ae7bd1d4ef68950c51f39cbe7c9d640686964
- Size 844KB
- SHA256 f116fbff87c14ae6c8f1664b418ae7bd1d4ef68950c51f39cbe7c9d640686964
- MD5 2c1577dbcce2c20d3ea09968a141a596
- SHA1 d06c21fdc1db62e5d37de2c161ebf596556b7c25
- SHA512 fa3f04d05665608c61f4525a42a05e875be9c01fb11eac8eec59303440f071c2c27075f092aff7fd840655615b77737cab934405030b06ccc17d50bc7d0b8abe
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io4:XLl7k/B2mGbUMoJnAhLrnAhUQQL
- TLSH T1CE05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE