General
- Target 4b1428377be5dbe7892bb7807e0da81cbdc613c7096cc81eb0c1972b599282e3
- Size 1.9MB
- Sample260819-h2ctgsygrf
- SHA256 4b1428377be5dbe7892bb7807e0da81cbdc613c7096cc81eb0c1972b599282e3
- MD5 a296865a465646cb72b6688410182911
- SHA1 7bf5cf5c5bf8df744e66526351741c6d20c173f7
- SHA512 2667e43e12f1add758f41f7390c3a846e57be1ea2280fb7973bcfe8141e26506e9b7bff3cf35c0c7ba5cb93a3f84e1e30faba0a7bf57e9ec1b6761b4e1e972d7
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuK:WylFHUv6ReIt0jSrOW88XK
- TLSH T142957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4b1428377be5dbe7892bb7807e0da81cbdc613c7096cc81eb0c1972b599282e3.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4b1428377be5dbe7892bb7807e0da81cbdc613c7096cc81eb0c1972b599282e3
- Size 1.9MB
- SHA256 4b1428377be5dbe7892bb7807e0da81cbdc613c7096cc81eb0c1972b599282e3
- MD5 a296865a465646cb72b6688410182911
- SHA1 7bf5cf5c5bf8df744e66526351741c6d20c173f7
- SHA512 2667e43e12f1add758f41f7390c3a846e57be1ea2280fb7973bcfe8141e26506e9b7bff3cf35c0c7ba5cb93a3f84e1e30faba0a7bf57e9ec1b6761b4e1e972d7
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuK:WylFHUv6ReIt0jSrOW88XK
- TLSH T142957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE