General
- Target 2c6b8fdbc2619f03a167d7a57dcc92d6edbb2d4f2295086300669d9a9fcec895
- Size 706KB
- Sample260820-m2579acg79
- SHA256 2c6b8fdbc2619f03a167d7a57dcc92d6edbb2d4f2295086300669d9a9fcec895
- MD5 8fdd069be081164078d385e2b9027e89
- SHA1 09c97c4528c0abe71dc8e90645d001e421b08f4d
- SHA512 9c68930724a66ad36177dec758254c0d38944da2127816cfeeb0888aca56710c23c6fa656216679f9fadf2165718a0e6f5e26da486d0764d743b909ca2995fca
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/751U:QptHFyrsy7t+TSQDsy777vxCRbapnnAS
- TLSH T168F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2c6b8fdbc2619f03a167d7a57dcc92d6edbb2d4f2295086300669d9a9fcec895.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2c6b8fdbc2619f03a167d7a57dcc92d6edbb2d4f2295086300669d9a9fcec895
- Size 706KB
- SHA256 2c6b8fdbc2619f03a167d7a57dcc92d6edbb2d4f2295086300669d9a9fcec895
- MD5 8fdd069be081164078d385e2b9027e89
- SHA1 09c97c4528c0abe71dc8e90645d001e421b08f4d
- SHA512 9c68930724a66ad36177dec758254c0d38944da2127816cfeeb0888aca56710c23c6fa656216679f9fadf2165718a0e6f5e26da486d0764d743b909ca2995fca
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/751U:QptHFyrsy7t+TSQDsy777vxCRbapnnAS
- TLSH T168F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE