General
- Target 2dfb6fe90d0c194b51b52c87d81a61bd27bb8d20afb4de82f669f53acbfbc6e8
- Size 2.5MB
- Sample260821-kr5gvsae99
- SHA256 2dfb6fe90d0c194b51b52c87d81a61bd27bb8d20afb4de82f669f53acbfbc6e8
- MD5 b70c7f452aea8d5ea1f739f367789141
- SHA1 a63e223b7dc038e0762c170707ab77fe7be070a3
- SHA512 003e2efcd69c50743cfa907de44800b431ea92a8de9016bd2f1594368439889d895e8c2e5368c17d7908ea5cb2f477e2cd00bf968474d64ee8a09ab254b86e16
- SSDEEP 49152:Y3N7xPuGE1ak5RVqZ/l9khKhPMOYJQvTtpA9lpx8:oxmR5rqZl9khKtMOYJyHi
- TLSH T15CC5EF747605A856C0A9427BF0992E0CA71B835CBA51578F2C13DFA27BF230DEC71E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2dfb6fe90d0c194b51b52c87d81a61bd27bb8d20afb4de82f669f53acbfbc6e8.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2dfb6fe90d0c194b51b52c87d81a61bd27bb8d20afb4de82f669f53acbfbc6e8
- Size 2.5MB
- SHA256 2dfb6fe90d0c194b51b52c87d81a61bd27bb8d20afb4de82f669f53acbfbc6e8
- MD5 b70c7f452aea8d5ea1f739f367789141
- SHA1 a63e223b7dc038e0762c170707ab77fe7be070a3
- SHA512 003e2efcd69c50743cfa907de44800b431ea92a8de9016bd2f1594368439889d895e8c2e5368c17d7908ea5cb2f477e2cd00bf968474d64ee8a09ab254b86e16
- SSDEEP 49152:Y3N7xPuGE1ak5RVqZ/l9khKhPMOYJQvTtpA9lpx8:oxmR5rqZl9khKtMOYJyHi
- TLSH T15CC5EF747605A856C0A9427BF0992E0CA71B835CBA51578F2C13DFA27BF230DEC71E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.