General
- Target 562a63852cf015945690cdf716cf2ec680afc203e34e62df20cc954acdd76532
- Size 1.9MB
- Sample260827-kmrefaz1ct
- SHA256 562a63852cf015945690cdf716cf2ec680afc203e34e62df20cc954acdd76532
- MD5 1486c1a01f8769f7ab597139bb94bdfb
- SHA1 2c08144a34b8917deb95bb5c34a5259ed72a3904
- SHA512 2ef0cad5f831f546eae12772946927e6f0c8ca4d3e2608008b57811005165b17011d369d8e9ff155acc9b4829b710f6fd06a10c0869c080a0d3f8c219134e363
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQY:eylFHUv6ReIt0jSrOZ88L
- TLSH T1B8957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
562a63852cf015945690cdf716cf2ec680afc203e34e62df20cc954acdd76532.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 562a63852cf015945690cdf716cf2ec680afc203e34e62df20cc954acdd76532
- Size 1.9MB
- SHA256 562a63852cf015945690cdf716cf2ec680afc203e34e62df20cc954acdd76532
- MD5 1486c1a01f8769f7ab597139bb94bdfb
- SHA1 2c08144a34b8917deb95bb5c34a5259ed72a3904
- SHA512 2ef0cad5f831f546eae12772946927e6f0c8ca4d3e2608008b57811005165b17011d369d8e9ff155acc9b4829b710f6fd06a10c0869c080a0d3f8c219134e363
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQY:eylFHUv6ReIt0jSrOZ88L
- TLSH T1B8957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE