General
- Target d54be3864326c907c1ce86f4b6a13c57cd8fb1e3cc2d95e2684cd2e91890d8b1
- Size 842KB
- Sample260823-h31xpsthkc
- SHA256 d54be3864326c907c1ce86f4b6a13c57cd8fb1e3cc2d95e2684cd2e91890d8b1
- MD5 b6dcdf664c30b7d8cad8503d39aac8f4
- SHA1 a71333b4050d7e62ca76a1256302030eb5a6d8cb
- SHA512 5dcc7dec54931f814bb15ada75b13c968c5ee22714674e713508e69e00d68a230639811333d0ebb706f88941b40731713fa9f57f6affb476f0addfbb4e39ba6e
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iot:XLl7k/B2mGbUMoJnAhLrnAhUQQ2
- TLSH T1DD05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d54be3864326c907c1ce86f4b6a13c57cd8fb1e3cc2d95e2684cd2e91890d8b1.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d54be3864326c907c1ce86f4b6a13c57cd8fb1e3cc2d95e2684cd2e91890d8b1
- Size 842KB
- SHA256 d54be3864326c907c1ce86f4b6a13c57cd8fb1e3cc2d95e2684cd2e91890d8b1
- MD5 b6dcdf664c30b7d8cad8503d39aac8f4
- SHA1 a71333b4050d7e62ca76a1256302030eb5a6d8cb
- SHA512 5dcc7dec54931f814bb15ada75b13c968c5ee22714674e713508e69e00d68a230639811333d0ebb706f88941b40731713fa9f57f6affb476f0addfbb4e39ba6e
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iot:XLl7k/B2mGbUMoJnAhLrnAhUQQ2
- TLSH T1DD05CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE