General
- Target ea1d0ebf0a2b34ab08929afc88623e9a6bb801bd5c69c97f14efa8984bb62ec8
- Size 626KB
- Sample260822-wglsjsxdkf
- SHA256 ea1d0ebf0a2b34ab08929afc88623e9a6bb801bd5c69c97f14efa8984bb62ec8
- MD5 9035685a4d4b84f99a0b2ddf13d26d43
- SHA1 a6a1ed64cad982f194d321afb760f99919958c34
- SHA512 37d8d6aa9cb7b31ec3fec68d503b10944618714a9ea6448a53ac0f77ea87457dc2e5f3c9d4214d4e5cd1ced3725e2eee6281fb045f3bb878c21a6925e506f3a8
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdNB:XLl7k/B2mGbUMoJI
- TLSH T106D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ea1d0ebf0a2b34ab08929afc88623e9a6bb801bd5c69c97f14efa8984bb62ec8.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ea1d0ebf0a2b34ab08929afc88623e9a6bb801bd5c69c97f14efa8984bb62ec8
- Size 626KB
- SHA256 ea1d0ebf0a2b34ab08929afc88623e9a6bb801bd5c69c97f14efa8984bb62ec8
- MD5 9035685a4d4b84f99a0b2ddf13d26d43
- SHA1 a6a1ed64cad982f194d321afb760f99919958c34
- SHA512 37d8d6aa9cb7b31ec3fec68d503b10944618714a9ea6448a53ac0f77ea87457dc2e5f3c9d4214d4e5cd1ced3725e2eee6281fb045f3bb878c21a6925e506f3a8
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkdNB:XLl7k/B2mGbUMoJI
- TLSH T106D4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE