General
- Target 6e79cae50f6d92901121544e64866e25c6de2b848ccb2a3d315ff4759e7ccd7a
- Size 1.4MB
- Sample260827-kftafs1hqa
- SHA256 6e79cae50f6d92901121544e64866e25c6de2b848ccb2a3d315ff4759e7ccd7a
- MD5 2f7851bd7d22f5ef68a640a780001583
- SHA1 7c3a4c4a7d2c606127a05c657f55b84ae85a3bd0
- SHA512 65974cf887b426076cf3ad2451e32bb13317d6eae498dc5b4df884a0c5ebe45b3df7b3655b6c8a6ed2456b64093ace24d837adbab36958e326501d5ce8101368
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75b3:MLl7k/B2mGbUMoLnAh9
- TLSH T14865E02D32AD5260E4EE5078B80E7692D6717875173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6e79cae50f6d92901121544e64866e25c6de2b848ccb2a3d315ff4759e7ccd7a.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6e79cae50f6d92901121544e64866e25c6de2b848ccb2a3d315ff4759e7ccd7a
- Size 1.4MB
- SHA256 6e79cae50f6d92901121544e64866e25c6de2b848ccb2a3d315ff4759e7ccd7a
- MD5 2f7851bd7d22f5ef68a640a780001583
- SHA1 7c3a4c4a7d2c606127a05c657f55b84ae85a3bd0
- SHA512 65974cf887b426076cf3ad2451e32bb13317d6eae498dc5b4df884a0c5ebe45b3df7b3655b6c8a6ed2456b64093ace24d837adbab36958e326501d5ce8101368
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75b3:MLl7k/B2mGbUMoLnAh9
- TLSH T14865E02D32AD5260E4EE5078B80E7692D6717875173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE