General
- Target 5486c02db3dbb95aeb0d6086ebab7099d830407d9e89a018b285cb0ce981ed5c
- Size 1.4MB
- Sample260823-g9sdgateld
- SHA256 5486c02db3dbb95aeb0d6086ebab7099d830407d9e89a018b285cb0ce981ed5c
- MD5 10d3a0661a92f4df5143e1bfe8ff9e8d
- SHA1 efa0b10a607f690aa8f9f3bb181b66210aa59584
- SHA512 807693bf9a35ae0c5a090a01f9dbe745e78e599da77ba35cc1d2d8c6228a1cd44dfaff8d19741275edc0d068814852af06b59ca97d7eda62f14935ae6ae22b9f
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkQ:MLl7k/B2mGbUMoLN
- TLSH T1BB65F01D325D8361E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5486c02db3dbb95aeb0d6086ebab7099d830407d9e89a018b285cb0ce981ed5c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5486c02db3dbb95aeb0d6086ebab7099d830407d9e89a018b285cb0ce981ed5c
- Size 1.4MB
- SHA256 5486c02db3dbb95aeb0d6086ebab7099d830407d9e89a018b285cb0ce981ed5c
- MD5 10d3a0661a92f4df5143e1bfe8ff9e8d
- SHA1 efa0b10a607f690aa8f9f3bb181b66210aa59584
- SHA512 807693bf9a35ae0c5a090a01f9dbe745e78e599da77ba35cc1d2d8c6228a1cd44dfaff8d19741275edc0d068814852af06b59ca97d7eda62f14935ae6ae22b9f
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkQ:MLl7k/B2mGbUMoLN
- TLSH T1BB65F01D325D8361E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE