General
- Target 5af02a670654b11b992836677ce8509238ef877a2f5b7e95a892b57a81e33214
- Size 843KB
- Sample260820-jweassgp2t
- SHA256 5af02a670654b11b992836677ce8509238ef877a2f5b7e95a892b57a81e33214
- MD5 5019f4476bcec180917ceeecbbeac4f8
- SHA1 a53de0589fae91a231136c054cddef3eb1ddce16
- SHA512 ea06631c27dceafde0aeb098491fc62e05561c31ed8d13f8282d530e3aae366a8f01e979f265cf8c4cced5a3590822eaeae55720a21af353f7798e6b28264c65
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io3:XLl7k/B2mGbUMoJnAhLrnAhUQQY
- TLSH T1DC05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5af02a670654b11b992836677ce8509238ef877a2f5b7e95a892b57a81e33214.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5af02a670654b11b992836677ce8509238ef877a2f5b7e95a892b57a81e33214
- Size 843KB
- SHA256 5af02a670654b11b992836677ce8509238ef877a2f5b7e95a892b57a81e33214
- MD5 5019f4476bcec180917ceeecbbeac4f8
- SHA1 a53de0589fae91a231136c054cddef3eb1ddce16
- SHA512 ea06631c27dceafde0aeb098491fc62e05561c31ed8d13f8282d530e3aae366a8f01e979f265cf8c4cced5a3590822eaeae55720a21af353f7798e6b28264c65
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Io3:XLl7k/B2mGbUMoJnAhLrnAhUQQY
- TLSH T1DC05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE