General
- Target 4cfa3b53185d152b11ad188a0d287f01a04e2c87a3871ea18ed8920241a4283a
- Size 843KB
- Sample260820-l36dzavalb
- SHA256 4cfa3b53185d152b11ad188a0d287f01a04e2c87a3871ea18ed8920241a4283a
- MD5 2e1b1b801225a3dd3e75c860b878bec0
- SHA1 1ec89d15ed31eff18ec6f77ac5cdaca63f2a577e
- SHA512 fafd63330d226cacbac904dca602caa8a75ab2c6ff7642abe9b94ec6375701620acdd03096c4ad9a51ea70e1f0e4d62c198b21eca92f41a9e21cb441d50716be
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoO:XLl7k/B2mGbUMoJnAhLrnAhUQQJ
- TLSH T1D405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4cfa3b53185d152b11ad188a0d287f01a04e2c87a3871ea18ed8920241a4283a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4cfa3b53185d152b11ad188a0d287f01a04e2c87a3871ea18ed8920241a4283a
- Size 843KB
- SHA256 4cfa3b53185d152b11ad188a0d287f01a04e2c87a3871ea18ed8920241a4283a
- MD5 2e1b1b801225a3dd3e75c860b878bec0
- SHA1 1ec89d15ed31eff18ec6f77ac5cdaca63f2a577e
- SHA512 fafd63330d226cacbac904dca602caa8a75ab2c6ff7642abe9b94ec6375701620acdd03096c4ad9a51ea70e1f0e4d62c198b21eca92f41a9e21cb441d50716be
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoO:XLl7k/B2mGbUMoJnAhLrnAhUQQJ
- TLSH T1D405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE