General
- Target 16d12aa1c4c009216729caf43cca916df932e180f52a355394205e0fe5ba606c
- Size 580KB
- Sample260831-df1wzatfle
- SHA256 16d12aa1c4c009216729caf43cca916df932e180f52a355394205e0fe5ba606c
- MD5 44e7d05d54b2605d8d18c6b0c136a215
- SHA1 0d8f1557aa83cf68566d176f70ecd270ca2174b6
- SHA512 5ca311bb927c82a3bac75c6313c25fc068acb2a8f988ace265809604fd600d692817114c6da2bf7758f0580e3453995c7a6a0ebd5601b3b2fa12a0b392a1222d
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JO:QptHFyrsy7t+TSQDsy777vxCRbapnO
- TLSH T18AC4EF2A3E6D07A5D4CD4474AE0AB7589A216DA13737CEF731A3B169CA32FD03E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
16d12aa1c4c009216729caf43cca916df932e180f52a355394205e0fe5ba606c.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 16d12aa1c4c009216729caf43cca916df932e180f52a355394205e0fe5ba606c
- Size 580KB
- SHA256 16d12aa1c4c009216729caf43cca916df932e180f52a355394205e0fe5ba606c
- MD5 44e7d05d54b2605d8d18c6b0c136a215
- SHA1 0d8f1557aa83cf68566d176f70ecd270ca2174b6
- SHA512 5ca311bb927c82a3bac75c6313c25fc068acb2a8f988ace265809604fd600d692817114c6da2bf7758f0580e3453995c7a6a0ebd5601b3b2fa12a0b392a1222d
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JO:QptHFyrsy7t+TSQDsy777vxCRbapnO
- TLSH T18AC4EF2A3E6D07A5D4CD4474AE0AB7589A216DA13737CEF731A3B169CA32FD03E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE