General
- Target 6b20e400613c0c7f3c3df5d928ab7b265322ff649dd605cc01833123a191848a
- Size 580KB
- Sample260820-lhfb2stejc
- SHA256 6b20e400613c0c7f3c3df5d928ab7b265322ff649dd605cc01833123a191848a
- MD5 2c828c7a1f91e4bb50bb561aff3b7230
- SHA1 e0c574105a70a269194ec1da6b7264751f39cfe4
- SHA512 2279a88b260f8986d95d0e2e70adfb499118c0e8902c88919a265161763fd3b155374d07890d5d82fad638674ad422d0f91b7fe6ed891d327c138e1747ceba68
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4Jn:QptHFyrsy7t+TSQDsy777vxCRbapnn
- TLSH T1E6C4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B169CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6b20e400613c0c7f3c3df5d928ab7b265322ff649dd605cc01833123a191848a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6b20e400613c0c7f3c3df5d928ab7b265322ff649dd605cc01833123a191848a
- Size 580KB
- SHA256 6b20e400613c0c7f3c3df5d928ab7b265322ff649dd605cc01833123a191848a
- MD5 2c828c7a1f91e4bb50bb561aff3b7230
- SHA1 e0c574105a70a269194ec1da6b7264751f39cfe4
- SHA512 2279a88b260f8986d95d0e2e70adfb499118c0e8902c88919a265161763fd3b155374d07890d5d82fad638674ad422d0f91b7fe6ed891d327c138e1747ceba68
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4Jn:QptHFyrsy7t+TSQDsy777vxCRbapnn
- TLSH T1E6C4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B169CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE