General
- Target d4bb1954ccb75ab775c7a4c93916827d76c1dd3a8d06c43c17b2b5cd204b4575
- Size 841KB
- Sample260827-kntwyssaph
- SHA256 d4bb1954ccb75ab775c7a4c93916827d76c1dd3a8d06c43c17b2b5cd204b4575
- MD5 52be6f118dc32628f2d684731093432f
- SHA1 090f38e84e934685ed8350e4145a26c81a5d1d86
- SHA512 4c16d885c7d0fa5557b3aeb5b8b9d1392d7e07248b7dca6539d1e29c0a807f63d1e3349ac15db7dd74a76e683e3277213c0e0cdd8eec7315108bdd58c7c31e53
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoJ:XLl7k/B2mGbUMoJnAhLrnAhUQQq
- TLSH T17805C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d4bb1954ccb75ab775c7a4c93916827d76c1dd3a8d06c43c17b2b5cd204b4575.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d4bb1954ccb75ab775c7a4c93916827d76c1dd3a8d06c43c17b2b5cd204b4575
- Size 841KB
- SHA256 d4bb1954ccb75ab775c7a4c93916827d76c1dd3a8d06c43c17b2b5cd204b4575
- MD5 52be6f118dc32628f2d684731093432f
- SHA1 090f38e84e934685ed8350e4145a26c81a5d1d86
- SHA512 4c16d885c7d0fa5557b3aeb5b8b9d1392d7e07248b7dca6539d1e29c0a807f63d1e3349ac15db7dd74a76e683e3277213c0e0cdd8eec7315108bdd58c7c31e53
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751IoJ:XLl7k/B2mGbUMoJnAhLrnAhUQQq
- TLSH T17805C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE