General
- Target ab849f90ff7678b0d83eeef57f4b392e157d3b5a768b23bb5a58ac30eae708a2
- Size 841KB
- Sample260820-lwf6hatglh
- SHA256 ab849f90ff7678b0d83eeef57f4b392e157d3b5a768b23bb5a58ac30eae708a2
- MD5 c628c3e141754905f44fa53a7818dbed
- SHA1 08783c536347b2e9f89193cfd7c47e39a1e9f5fe
- SHA512 ae256bac361fb0293bab3b18b6d971e7a70b932e0980b5ebb7ba811b8150294fca548521806d5b4ac82f1a54e25240598a5a04c2cfa07509d5fd0b3039370539
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoZ:XLl7k/B2mGbUMoJnAhLrnAhUQQO
- TLSH T1B305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ab849f90ff7678b0d83eeef57f4b392e157d3b5a768b23bb5a58ac30eae708a2.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ab849f90ff7678b0d83eeef57f4b392e157d3b5a768b23bb5a58ac30eae708a2
- Size 841KB
- SHA256 ab849f90ff7678b0d83eeef57f4b392e157d3b5a768b23bb5a58ac30eae708a2
- MD5 c628c3e141754905f44fa53a7818dbed
- SHA1 08783c536347b2e9f89193cfd7c47e39a1e9f5fe
- SHA512 ae256bac361fb0293bab3b18b6d971e7a70b932e0980b5ebb7ba811b8150294fca548521806d5b4ac82f1a54e25240598a5a04c2cfa07509d5fd0b3039370539
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoZ:XLl7k/B2mGbUMoJnAhLrnAhUQQO
- TLSH T1B305C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE