General
- Target 0e43674b1fad411559f3965561bdb5226449ac74a7e7bf74013b37688c4ac7e3
- Size 2.5MB
- Sample260820-mwgmpsveph
- SHA256 0e43674b1fad411559f3965561bdb5226449ac74a7e7bf74013b37688c4ac7e3
- MD5 1a274498e0c63779c7c8a4b00c6a6799
- SHA1 b68defb178544b678fdb270a8e1fa1718b4bd795
- SHA512 a97e5a3bd23c318358efea2a441f651633f51ea4b78029a71ac7565b57301426855913e26309588f4bb410715f91aac6ccc7b9f7932ffd710d8a3723d6a16622
- SSDEEP 49152:59egFTiUnvMMrCOMacyxxNp/JbRhdJTOhS1Q2dbQK4MRT3vc:7LDnfrCOZxNJbRhdJTOhS1/bhRT/
- TLSH T17AC5D0B0F436BFDBE5008176FDB26A075EC852DFC8046AB96DBA590836DCB943093C65
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e43674b1fad411559f3965561bdb5226449ac74a7e7bf74013b37688c4ac7e3.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 0e43674b1fad411559f3965561bdb5226449ac74a7e7bf74013b37688c4ac7e3
- Size 2.5MB
- SHA256 0e43674b1fad411559f3965561bdb5226449ac74a7e7bf74013b37688c4ac7e3
- MD5 1a274498e0c63779c7c8a4b00c6a6799
- SHA1 b68defb178544b678fdb270a8e1fa1718b4bd795
- SHA512 a97e5a3bd23c318358efea2a441f651633f51ea4b78029a71ac7565b57301426855913e26309588f4bb410715f91aac6ccc7b9f7932ffd710d8a3723d6a16622
- SSDEEP 49152:59egFTiUnvMMrCOMacyxxNp/JbRhdJTOhS1Q2dbQK4MRT3vc:7LDnfrCOZxNJbRhdJTOhS1/bhRT/
- TLSH T17AC5D0B0F436BFDBE5008176FDB26A075EC852DFC8046AB96DBA590836DCB943093C65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.