General
- Target 3e6f5c7e62fcdf9e693c1a4abf2b1365289a94f72d44104f0b7bd940d0cd8143
- Size 1.9MB
- Sample260820-kgpnnacc64
- SHA256 3e6f5c7e62fcdf9e693c1a4abf2b1365289a94f72d44104f0b7bd940d0cd8143
- MD5 41252b5df0f7063074423703c4aa5bd6
- SHA1 763c0eb03613bc84ad886fa7da487d89688a0a2c
- SHA512 731423e2381ed465261a7dbc4bff9849edb8101f65768b257b989acf2b72b85a40f33ade6af942cc6edf5fe0be6981b46013901d104439a8ff6e564f68f5d0cc
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQD:eylFHUv6ReIt0jSrOZ88M
- TLSH T1DA957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3e6f5c7e62fcdf9e693c1a4abf2b1365289a94f72d44104f0b7bd940d0cd8143.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 3e6f5c7e62fcdf9e693c1a4abf2b1365289a94f72d44104f0b7bd940d0cd8143
- Size 1.9MB
- SHA256 3e6f5c7e62fcdf9e693c1a4abf2b1365289a94f72d44104f0b7bd940d0cd8143
- MD5 41252b5df0f7063074423703c4aa5bd6
- SHA1 763c0eb03613bc84ad886fa7da487d89688a0a2c
- SHA512 731423e2381ed465261a7dbc4bff9849edb8101f65768b257b989acf2b72b85a40f33ade6af942cc6edf5fe0be6981b46013901d104439a8ff6e564f68f5d0cc
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQD:eylFHUv6ReIt0jSrOZ88M
- TLSH T1DA957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE