General
- Target 6b16f57f238cd4bb9e7d9d7a9c82e768cffe6962e29405c89b41586a416ad48b
- Size 624KB
- Sample260826-nf49haxfre
- SHA256 6b16f57f238cd4bb9e7d9d7a9c82e768cffe6962e29405c89b41586a416ad48b
- MD5 18ebb42ae6ffb472d2538248b2db4313
- SHA1 55c0db68d030a0f7656a29123afe0f3d919eb5f6
- SHA512 a717d678859a7156dd1c47dfa599eb7b2b2fd6f3e701fb855c4b4540689de5d3ad7b909dab26f16989ca9bc717e536027f6ab1381708139a054f283d7b9e3e87
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkB:XLl7k/B2mGbUMoJg
- TLSH T14ED4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6b16f57f238cd4bb9e7d9d7a9c82e768cffe6962e29405c89b41586a416ad48b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6b16f57f238cd4bb9e7d9d7a9c82e768cffe6962e29405c89b41586a416ad48b
- Size 624KB
- SHA256 6b16f57f238cd4bb9e7d9d7a9c82e768cffe6962e29405c89b41586a416ad48b
- MD5 18ebb42ae6ffb472d2538248b2db4313
- SHA1 55c0db68d030a0f7656a29123afe0f3d919eb5f6
- SHA512 a717d678859a7156dd1c47dfa599eb7b2b2fd6f3e701fb855c4b4540689de5d3ad7b909dab26f16989ca9bc717e536027f6ab1381708139a054f283d7b9e3e87
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkB:XLl7k/B2mGbUMoJg
- TLSH T14ED4F01D325D8321E0EE4038BC0FB691E636BC651B71D9EB3AB0D67D5A32BE43635A41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE