General
- Target caaafb450d1d38ccfc5d1e019d9a0f50f06999c8d056413eff1c6c84b1e2ae59
- Size 844KB
- Sample260830-yy738ada78
- SHA256 caaafb450d1d38ccfc5d1e019d9a0f50f06999c8d056413eff1c6c84b1e2ae59
- MD5 a88ddfd2a8c07366cf8e8fd5186269cc
- SHA1 6e0c4594f31ef12d52867eec056da0bc34ed930f
- SHA512 3ce55d18239a3702abe9d8f2f00f79ec2c3f71960574ab16aabfb78c8bc156eac7923feaeb35a2bccc78613bfc5c2a6ca7143d8e130e994562e5c017bd4e5915
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ior:XLl7k/B2mGbUMoJnAhLrnAhUQQE
- TLSH T1D405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
caaafb450d1d38ccfc5d1e019d9a0f50f06999c8d056413eff1c6c84b1e2ae59.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target caaafb450d1d38ccfc5d1e019d9a0f50f06999c8d056413eff1c6c84b1e2ae59
- Size 844KB
- SHA256 caaafb450d1d38ccfc5d1e019d9a0f50f06999c8d056413eff1c6c84b1e2ae59
- MD5 a88ddfd2a8c07366cf8e8fd5186269cc
- SHA1 6e0c4594f31ef12d52867eec056da0bc34ed930f
- SHA512 3ce55d18239a3702abe9d8f2f00f79ec2c3f71960574ab16aabfb78c8bc156eac7923feaeb35a2bccc78613bfc5c2a6ca7143d8e130e994562e5c017bd4e5915
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Ior:XLl7k/B2mGbUMoJnAhLrnAhUQQE
- TLSH T1D405CF1D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE