General
- Target 2d7e328f80f5f6d01033f451d1e045769cf6b853d8d4932c4cf2f0a4c2aaf5da
- Size 2.1MB
- Sample260825-mbqpwazfpf
- SHA256 2d7e328f80f5f6d01033f451d1e045769cf6b853d8d4932c4cf2f0a4c2aaf5da
- MD5 c8cad58cdadf6b5b0cf2dac1b2b7c523
- SHA1 9de5aeb86a16482e69e3b2943f93c37fe5285514
- SHA512 62fe463d02010063aaf58c1c5d6a1bdf95ac02d57ed499d4453994805e01bc524211b6d993f343d212f2bcaa64cc32dee10b3b9843a7b954261cd291782d755f
- SSDEEP 24576:IENJKEt6dq8hXj8R2vxW870KHke5GqR6FokG81Cvz44sLy0aZJQ5Te6Lgcn:IENwzIR257BnIqR6FoRvku04YL
- TLSH T120A55A10AB508028FAE752F55AADE1AC951C7DF0879860CFB0D577FA46366F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d7e328f80f5f6d01033f451d1e045769cf6b853d8d4932c4cf2f0a4c2aaf5da.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2d7e328f80f5f6d01033f451d1e045769cf6b853d8d4932c4cf2f0a4c2aaf5da
- Size 2.1MB
- SHA256 2d7e328f80f5f6d01033f451d1e045769cf6b853d8d4932c4cf2f0a4c2aaf5da
- MD5 c8cad58cdadf6b5b0cf2dac1b2b7c523
- SHA1 9de5aeb86a16482e69e3b2943f93c37fe5285514
- SHA512 62fe463d02010063aaf58c1c5d6a1bdf95ac02d57ed499d4453994805e01bc524211b6d993f343d212f2bcaa64cc32dee10b3b9843a7b954261cd291782d755f
- SSDEEP 24576:IENJKEt6dq8hXj8R2vxW870KHke5GqR6FokG81Cvz44sLy0aZJQ5Te6Lgcn:IENwzIR257BnIqR6FoRvku04YL
- TLSH T120A55A10AB508028FAE752F55AADE1AC951C7DF0879860CFB0D577FA46366F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory