General
- Target faa23feb5bdf9c58c90ed3224af9a99f6bfbc4cb774a40cbebdfa2868c41f0a9
- Size 1.4MB
- Sample260820-lp3e6axsb1
- SHA256 faa23feb5bdf9c58c90ed3224af9a99f6bfbc4cb774a40cbebdfa2868c41f0a9
- MD5 a11dcbf168a373eeebfadf73b38e95ee
- SHA1 c84a7e9d7da1f4887953dbf341f74f6eb56d2302
- SHA512 ceffa0af290b0e9f3e5fbd019cf1398f90abbd9fa17bf4397806789066d04c2ea9dbd9cbda0feb2851bfdaa8d963b8e5bed08ec27a4804f174009fa54427e927
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75z:MLl7k/B2mGbUMoLnAh5
- TLSH T18E65E02D32AD5250E4EE5078B84E7691D67278351732A5EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
faa23feb5bdf9c58c90ed3224af9a99f6bfbc4cb774a40cbebdfa2868c41f0a9.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target faa23feb5bdf9c58c90ed3224af9a99f6bfbc4cb774a40cbebdfa2868c41f0a9
- Size 1.4MB
- SHA256 faa23feb5bdf9c58c90ed3224af9a99f6bfbc4cb774a40cbebdfa2868c41f0a9
- MD5 a11dcbf168a373eeebfadf73b38e95ee
- SHA1 c84a7e9d7da1f4887953dbf341f74f6eb56d2302
- SHA512 ceffa0af290b0e9f3e5fbd019cf1398f90abbd9fa17bf4397806789066d04c2ea9dbd9cbda0feb2851bfdaa8d963b8e5bed08ec27a4804f174009fa54427e927
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75z:MLl7k/B2mGbUMoLnAh5
- TLSH T18E65E02D32AD5250E4EE5078B84E7691D67278351732A5EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE