General
- Target a9a16b3660e8d15c49f2ae2c1b8fdda45723383a92f44ed30b2b116d820fbbcc
- Size 1.9MB
- Sample260820-j4hcessfkb
- SHA256 a9a16b3660e8d15c49f2ae2c1b8fdda45723383a92f44ed30b2b116d820fbbcc
- MD5 66ec0b52ba0fcff47f00f3afb503eb9a
- SHA1 f9e36e6f27c2e163f4c8a20e265d1686f2890c0e
- SHA512 410696f185fd260e095192cd4409d95d52ed5911c6704e69e1740219e1209981edcf2cd739f6aea8219d9b8fd8dbea6046f47a45b7f2a5d8c4ca34db9bddd7e6
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyX:WylFHUv6ReIt0jSrOW88X0
- TLSH T127957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a9a16b3660e8d15c49f2ae2c1b8fdda45723383a92f44ed30b2b116d820fbbcc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target a9a16b3660e8d15c49f2ae2c1b8fdda45723383a92f44ed30b2b116d820fbbcc
- Size 1.9MB
- SHA256 a9a16b3660e8d15c49f2ae2c1b8fdda45723383a92f44ed30b2b116d820fbbcc
- MD5 66ec0b52ba0fcff47f00f3afb503eb9a
- SHA1 f9e36e6f27c2e163f4c8a20e265d1686f2890c0e
- SHA512 410696f185fd260e095192cd4409d95d52ed5911c6704e69e1740219e1209981edcf2cd739f6aea8219d9b8fd8dbea6046f47a45b7f2a5d8c4ca34db9bddd7e6
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQuyX:WylFHUv6ReIt0jSrOW88X0
- TLSH T127957C16769D81E1D05A1030696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE