General
- Target 2c9f5ceb633f8e66e0f3d6e4bfc2d7a1e30fd01d692567bdfe3c13b20fd29943
- Size 1.4MB
- Sample260826-k8gr5abl5x
- SHA256 2c9f5ceb633f8e66e0f3d6e4bfc2d7a1e30fd01d692567bdfe3c13b20fd29943
- MD5 f96e54185efa5748547a6c9ce0acc291
- SHA1 8672a4b8f233ee76cbd86ce1e601895ce76f6a6c
- SHA512 50d3b2c695baaa9fb09de290ab476ca8403014df5afe8f64df219380fdb68c4b5cf914aaed1b673ccec4d09b7208a9939ed3145dec99330bfeec735df5e68091
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqF:MLl7k/B2mGbUMoLP
- TLSH T12D65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2c9f5ceb633f8e66e0f3d6e4bfc2d7a1e30fd01d692567bdfe3c13b20fd29943.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2c9f5ceb633f8e66e0f3d6e4bfc2d7a1e30fd01d692567bdfe3c13b20fd29943
- Size 1.4MB
- SHA256 2c9f5ceb633f8e66e0f3d6e4bfc2d7a1e30fd01d692567bdfe3c13b20fd29943
- MD5 f96e54185efa5748547a6c9ce0acc291
- SHA1 8672a4b8f233ee76cbd86ce1e601895ce76f6a6c
- SHA512 50d3b2c695baaa9fb09de290ab476ca8403014df5afe8f64df219380fdb68c4b5cf914aaed1b673ccec4d09b7208a9939ed3145dec99330bfeec735df5e68091
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHqF:MLl7k/B2mGbUMoLP
- TLSH T12D65E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D17D9B33BE83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE