General
- Target ec28f5da0fcf25e1b9b234c1302c568f90893e4c57372af2cb91b253568b49e1
- Size 1.4MB
- Sample260820-kefb7scc53
- SHA256 ec28f5da0fcf25e1b9b234c1302c568f90893e4c57372af2cb91b253568b49e1
- MD5 3933ecedee0a9c68354cadc8fd4184fc
- SHA1 b29e5650d9223f1b71b6882d4c4af186744379db
- SHA512 500b1c59098e04d3d68476096ecc687854a719dd33acd74ae9c70e35fb511b2fe4bcdac6ca3211028fbef3b0aaf532d7d012fa422ca0c1b0cb5ead4adf8c76be
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqi:MLl7k/B2mGbUMoL8
- TLSH T12E65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D27D9B33BD83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ec28f5da0fcf25e1b9b234c1302c568f90893e4c57372af2cb91b253568b49e1.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ec28f5da0fcf25e1b9b234c1302c568f90893e4c57372af2cb91b253568b49e1
- Size 1.4MB
- SHA256 ec28f5da0fcf25e1b9b234c1302c568f90893e4c57372af2cb91b253568b49e1
- MD5 3933ecedee0a9c68354cadc8fd4184fc
- SHA1 b29e5650d9223f1b71b6882d4c4af186744379db
- SHA512 500b1c59098e04d3d68476096ecc687854a719dd33acd74ae9c70e35fb511b2fe4bcdac6ca3211028fbef3b0aaf532d7d012fa422ca0c1b0cb5ead4adf8c76be
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqi:MLl7k/B2mGbUMoL8
- TLSH T12E65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D27D9B33BD83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE