General
- Target 0b9e65ba887cbc3a41fdc03b4c60c129da26c12f22eedf94047ee82a2b0c9779
- Size 1.3MB
- Sample260826-kva3esce43
- SHA256 0b9e65ba887cbc3a41fdc03b4c60c129da26c12f22eedf94047ee82a2b0c9779
- MD5 9bb6bf7e553c40717829ba903b95a06e
- SHA1 5be37eb220bbf85a6f5a8e2bea0bafb8a708f172
- SHA512 37c97eb04e1fa8104e3f9c4bd5edcb111468e9dcf19dedff4afda2942a484a4d0b90b3f0ae1d954506ca3a858f8e3158a7e8f4e6c7a4f4b42a53b0d92e5ddcae
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnp:WylFHUv6ReIt0jSrOQ
- TLSH T118557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0b9e65ba887cbc3a41fdc03b4c60c129da26c12f22eedf94047ee82a2b0c9779.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 0b9e65ba887cbc3a41fdc03b4c60c129da26c12f22eedf94047ee82a2b0c9779
- Size 1.3MB
- SHA256 0b9e65ba887cbc3a41fdc03b4c60c129da26c12f22eedf94047ee82a2b0c9779
- MD5 9bb6bf7e553c40717829ba903b95a06e
- SHA1 5be37eb220bbf85a6f5a8e2bea0bafb8a708f172
- SHA512 37c97eb04e1fa8104e3f9c4bd5edcb111468e9dcf19dedff4afda2942a484a4d0b90b3f0ae1d954506ca3a858f8e3158a7e8f4e6c7a4f4b42a53b0d92e5ddcae
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnp:WylFHUv6ReIt0jSrOQ
- TLSH T118557E02BA4DC2B1C18C15702D6F77366D349A593B36CEA3B3D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE