General
- Target 978fe8e9adb92a5ca503f845e47388c2f7084f8a5531442f56db636fd775c6cc
- Size 628KB
- Sample260824-mbd13swcqa
- SHA256 978fe8e9adb92a5ca503f845e47388c2f7084f8a5531442f56db636fd775c6cc
- MD5 373fdcd7e564b46e60b5e277df5d7bc4
- SHA1 b0a0314c122259ea28d32786d5b2eee5d7d33b4c
- SHA512 dbb1397057060e57a9169ca20b739f791c5855cbaf41daf4aa9bb354883e753e903638b6fc2d704c0abb10025cfa4cf9dc4dea987fe703e2466a99070a814c1f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJK1:XLl7k/B2mGbUMoJnAhtK1
- TLSH T1B9D4E02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
978fe8e9adb92a5ca503f845e47388c2f7084f8a5531442f56db636fd775c6cc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 978fe8e9adb92a5ca503f845e47388c2f7084f8a5531442f56db636fd775c6cc
- Size 628KB
- SHA256 978fe8e9adb92a5ca503f845e47388c2f7084f8a5531442f56db636fd775c6cc
- MD5 373fdcd7e564b46e60b5e277df5d7bc4
- SHA1 b0a0314c122259ea28d32786d5b2eee5d7d33b4c
- SHA512 dbb1397057060e57a9169ca20b739f791c5855cbaf41daf4aa9bb354883e753e903638b6fc2d704c0abb10025cfa4cf9dc4dea987fe703e2466a99070a814c1f
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJK1:XLl7k/B2mGbUMoJnAhtK1
- TLSH T1B9D4E02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE